Calling an Azure Automation Runbook via Webhook

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello,
Currently, we are calling an internal PowerShell script to complete offboarding tasks that IDNow cannot handle natively. (i.e. Intune device wipe, session token revocation, etc.) However, we would like to start using one of our existing Azure automation runbooks to complete these tasks among others. Therefore, was curious if we could potentially use a web-hook to call the Azure runbook from within our existing Offboarding PS script, or is the PS script call even still necessary? Any guidance or recommendations would be greatly appreciated!

Thanks,
Nate

2

Hi Nathan,

This should be possible with our Event Triggers. Have you tried configuring an event trigger subscription to point to the URL of your runbook? I think you want the identity attributes changed trigger, since that can tell you when a lifecycle state has changed.

  1. Create a new subscription to identity attributes changed trigger: Using Event Triggers - SailPoint Identity Services
  2. Follow this guide to setup your runbook to start from a webhook. Get the unique URL of your runbook and use that in the configuration of your event trigger subscription: Start an Azure Automation runbook from a webhook | Microsoft Learn.
3

Hey Colin,
Thanks for the recommendation. We have not deployed any Event Triggers as of yet, but I’ll look into it with our developer and see if this will get use what we need!

Thanks,
Nate