Birthright Provisioning Scenario

Hello,

This is a scenario based question:

When we have two or more target systems(Example : AD, SNow and Delimited file) for birthright provisioning.

1.) We have a scenario where we wanted to 1st provision to AD and then use the saMAccountName of AD as accountID for other two sources. Is there a way we can add wait on provisioning for other sources like we do have it in IIQ workflows?

As we know - we should use same logic for saMAccountName in create profile of AD and accountIDs for other sources.
However we would like to know if we can configure or make any changes to first provision to AD, ServiceNow and Delimited file in a order.

2.) We wanted to create SNow account before Delimited file so that we can create a ticket for delimited file source as part of ServiceNow ServiceDesk integration. How can we achieve it?

Thanks,
Archana

Question 1:

  1. Define a role r1 for provisioning AD group based on your joiner condition. This will lead to AD account creation.
  2. Define another joiner role r2 which will be assigned
    a. if you have ‘AD groups provisioned by role r1’
    b. and also satisfy the joiner condition.

This will ensure sequential account creation.

Question 2:

Similar to solution for question 1.

4 Likes

A post was split to a new topic: Help creating birthright provisioning