I created a certification campaign in Identity Security Cloud and configured it so that, once the campaign end date is reached, any items with no decision should be automatically revoked.
However, the campaign end date was 5 days ago and the campaign is still active. Also, the pending items have not been automatically revoked.
I would like to know if this is the expected behavior or if there is any additional configuration I should check in order for the campaign to close and trigger the automatic revocations.
Hello María. The deadline is just the due date for reviewers, it doesn’t automatically complete the campaign or trigger any revocations on its own.
If you look at your Campaign Composition Report, the setting “Choose to maintain or revoke access to undecided items” means an admin has to pick what happens to the remaining items when completing the campaign. So until someone does that, the campaign just stays active.
To get it moving, go to Admin > Certifications > Campaigns, select Actions > Complete & Revoke Access, and confirm Complete Campaign. ISC will preserve any decisions reviewers already made and mark the remaining undecided items for revocation.
Once it’s completed, you can verify the revocations went through at Admin > Identities > Activities for direct-connect sources. For anything that couldn’t be removed automatically, check Actions > Download Reports > Campaign Remediation Status Report. Completing a Certification Campaign
