# Auto revoke mover certifications in workflow

**URL:** <https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533>\
**Category:** SHF Discussion and Questions\
**Tags:** workflows, apis, identity-security-cloud\
**Created:** [August 10, 2026, 7:52am UTC](https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533 "2026-08-10T07:52:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jmmb](https://avatars.discourse-cdn.com/v4/letter/j/b38774/32.png) [@jmmb](https://developer.sailpoint.com/discuss/u/jmmb)\
**Post date:** [August 10, 2026, 7:52am UTC](https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533/1 "2026-08-10T07:52:06Z")

</div>

Hello everyone,

We have already created a workflow that triggers a certification for mover scenarios. Is there a way to auto revoke those certifications if it is already past the due date and the manager has not signed off the certification?

---

<div class="post-metadata">

**Author:** ![ROHPU](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rohpu/32/36109_2.png) [@ROHPU](https://developer.sailpoint.com/discuss/u/ROHPU)\
**Post date:** [August 10, 2026, 8:32am UTC](https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533/2 "2026-08-10T08:32:37Z")

</div>

Hi Jasmine,

you can go through this link [Certification campaign remains active after end date with automatic revocation configured - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community](https://developer.sailpoint.com/discuss/t/certification-campaign-remains-active-after-end-date-with-automatic-revocation-configured/216886)

---

<div class="post-metadata">

**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\
**Post date:** [August 10, 2026, 9:09am UTC](https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533/3 "2026-08-10T09:09:50Z")

</div>

Hi @jmmb ,

Yes, this can be handled natively in ISC. When creating the mover certification, configure how **undecided items should be handled when an admin completes the campaign**. ISC supports maintaining the access or allowing the admin to choose between maintaining/revoking it.

SailPoint **recommends maintaining undecided access** by default, due to the difficulty of reinstating access after an automatic revoke.

If your requirement is specifically to **revoke all undecided access after the campaign is past due** , you can use the **[Complete Campaign](https://developer.sailpoint.com/docs/api/complete-campaign-v-1)** API with `autoCompleteAction: REVOKE`. The API is designed to complete campaigns that are past due.

Also, if the manager has already made decisions but has not signed off, those decisions are preserved; the revoke action applies only to the remaining undecided items.

So, for a mover use case, I would first use the native certification completion settings and only add a workflow/API layer if you specifically need the campaign to be automatically force-completed and revoked after the deadline.

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [October 9, 2026, 9:10am UTC](https://developer.sailpoint.com/discuss/t/auto-revoke-mover-certifications-in-workflow/218533/4 "2026-10-09T09:10:47Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.