Certification Campaign Auto revoke undecided items

Identity Security Cloud (ISC) ISC Discussion and Questions
, , , , ,
1

Hi Community,

I have a use case in which I want to create a certification campaign for a specefic type of roles when a user changes department. In that process all not decided items should be auto revoked.

In the API doc there is the option of "autoRevokeAllowed": true, but I am unsure if this forces auto Revokation or no.

I also looked how it is enabled from UI perspective and the only thing I can choose is here:

image
image582Ă—111 2.83 KB

Via UI where can I choose between the 2 options inside the option I selected and how can I force revokation via API?

Thank you in advance!

2

Hello @fayadm,

The stated option is applicable only when someone manually completes the certification campaign after the due date has passed. It will not automatically revoke access for undecided items, as the certification campaign does not automatically complete or close after the due date. Therefore, an Admin or Cert Admin must manually complete the campaign and choose whether to maintain or revoke the remaining access.

image

Please check this. Even though the due date has passed, the campaign is still active. Someone with Admin or Cert Admin access needs to complete it manually. At that point, an option will be provided to either maintain or revoke the access.

image

3

Since it can be done manually, is there a way to access a specefic endpoint to do this after the due date of a campaign?

I would like to embed this is my workflow.

edit: never mind I found it https://swhd-sb.api.identitynow.com/v2025/campaigns/CAMPAIGN_ID/complete

with the body:
{

“autoCompleteAction”: “REVOKE”

}