Audit the completion status of any access request using custom audit

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

IIQ 8.4p2

Please share any images or screenshots, if relevant.

NA

Please share any other relevant files that may be required (for example, logs).

NA

Share all details about your problem, including any error messages you may have received.

We have leaver process for Emergency Termination, which we want to audit using Custom Audit.

We are looking for ways to get the status of Access request after it gets completed and audit the same in custom audit object.

Currently, the leaver workflow completes but the access request remains in pending state.

Is there any way to hold the workflow until the access request completes provisioning and updates the status.

Thanks & Regards,

Milina Phalke

2

@milinaphalke You can write a script to check the status of your identityrequest and if it is completed, then only move to end step. otherwise, you can move the workflow to wait state and again recheck the status.

3

If you want the workflow to halt until the access request completes, you can add a wait loop to continually check the status and after its “Complete”, do your custom audit

Doc on identity request statuses here: https://community.sailpoint.com/t5/IdentityIQ-Wiki/What-does-Identity-Request-Execution-Status-quot-Verifying-quot/ta-p/72753

4

We also have a similar requirement. We check the status of provisioning result to write the audit event. Access request status is updated after “Perform Maintenance” and “Perform Identity Request Maintenance” task run.

5

Hi @milinaphalke ,

In the After provisioning rule, run the Perform Identity Request Maintenance task. It will complete the access request once the provisioning is done.

6

Thank you everyone for inputs !