Assistance with workflow (Notification when Access Profile is selected)

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello All,
I am new to building workflows, so apologies if I am missing the obvious.

The Use Case: We have a team that needs to be notified whenever an Access Profile (AP) request goes through. Right now approval on that request is turned off. I am trying to key off of the Access Profile ID.

My solution thus far:
The solution I have so far is:

image
image638×548 28.5 KB

the flow will fail at the operator.

  • The trigger was left as is
  • The operator is set up as follows:

Value 1: $.trigger.requestedItemsStatus
Comparison Operator: Starts With
Value 2: “id”:"

I have also attempted to use “Contains” for the comparison operator and $.trigger.requestedItemsStatus.id==. I have scoured the docs and am unable to find where to go next. Any help on this would be amazing.

Thank you

2

Hi @MMckeehanEY - for your value1, try $.trigger.requestedItemsStatus[0].name
Also look at the step input for your compare to see what is there. You can also try.id if that is the value you need.

3

Hi instead of using compare string operator you can directly use the filter in access request decision trigger like this.

$.requestedItemsStatus[?(@.name == "AP Name" && @.operation == "Add")]

This will also ensure your workflow is triggered only for a specific AP that you want instead of for each and every request.
Then you can get the identity and send email.

4

@ryan_toornburg, that solution did the trick. Thanks!

@udayputta, I did try to add that to the trigger, but that was unsuccessful. I am not sure why it did not work. I will need to revisit when I have a chance.

1 Like
5

@udayputta ,

Now that I have the flow working, I am going to use your idea of implementing a filter. I am taking it slow so here is the trigger so far

"trigger": {
        "type": "EVENT",
        "attributes": {
            "format.$": "$.requestedItemsStatus[?(@.name==\"Engineering Access\")}",
            "id": "idn:access-request-post-approval"

The beginning of the test case I am running is:

  "requestedItemsStatus": [
    {
      "id": "2c91808b6ef1d43e016efba0ce470904",
      "name": "This should not trigger the workflow",
      "description": "Engineering Access",
      "type": "ACCESS_PROFILE",
      "operation": "Add",
      "clientMetadata": {
        "applicationName": "My application"

If I am understanding everything correctly, this should not trigger the workflow when I test it. Am I missing something with the trigger?

6

Hey if you want to validate if your trigger works or not you can also validate using the approach which I have mentioned here in this post. If you trigger from the UI your workflow will still trigger as the UI does not care about the filter. If you want to validate then you have to first enable it and then do a testing by raising the request.

7

That worked. I wish that the test would validate the trigger for a filter.