Automatically Trigger Notification Workflow on Workflow Execution Failure

Requirement:

I need to trigger a main workflow whenever any one of the workflows in the tenant fails during execution.

The tenant contains multiple workflows. If *even a single workflow execution fails, the main workflow should be triggered to *send a notification alerting about the failure.

Current Implementation Attempts:

  1. I tried using a Scheduled Trigger to periodically check for failures.
  2. I attempted using the HTTP Request Action to call the “List Workflow Executions” API, but it fails with a 403 Forbidden error, even though I’ve granted the necessary permissions in the token.

Looking for Suggestions:

Is there a recommended approach to monitor workflow execution failures tenant-wide and trigger a separate workflow automatically when a failure occurs? Would appreciate any guidance or alternate solutions.

Token URL: https://tenant/oauth/token
Request URL: https://tenant/beta/workflows/{tenantID}/executions

Thank You

Hello Gopi, Have you tried in Postman? How was the execution in Postman? is it working fine there ?

Hi @Lashminarayanan01

I am able to reach the endpoint using Postman, but when using an HTTP operation, I receive errors like 401 and 403. I’m looking for any workarounds or suggestions for this requirement.

Can you try creating a new workflow with v2025 APIs and test it. I know IDN workflows behave abnormally sometimes. Make sure PAT has scope:all perms

let me check once and i’ll get back you, yeah i’ve provided all permissions

Hi @JackSparrow

Still im facing the same issue

Hi @Gopi2000,

Are you using a personal access token or an OAuth client credential generated from Global → API Management.?

The OAuth client credentials does not have a user context and is advisable to use the PAT for the workflow actions as the ISC API’s expect a user context.

Also, have you had a look at this thread.?

Hello @Gopi2000
To add on Jesvin, you are always advised to use a service account to generate PAT’s from ISC and use it inside the WF’s.
I can check deep but if its 401 or 403 than it seems the permissions are not right, did you try with All Scope ? As the postman you attempted would have a different PAT.
And ensure your Service Account is set to ORG ADMIN. This gives you an added advantage as to when someone leaves your organisation and you terminate the user, the PATS used in WF’s will cause WF’s to fail.

Also, noticed in your initial question you mention → https://tenant/beta/workflows/{tenantID}/executions

This is not supposed to be the tenant ID but the WF ID for example → get-workflow-executions | SailPoint Developer Community

And further more to satisfy your use case, you need to iterate over the LIST WORKFLOWS call, which will return you the list of WF’s in your tenant and than use the values in the HTTP call you make over the iteration in LOOP.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.