Share all details about your problem, including any error messages you may have received.
I’ve recently enabled a certification event to be triggered under certain conditions for the identities in our system. I’m finding that the system will either add to an existing certificationGroup already created by the event, or will randomly generate a new CertificationGroup for which all new certifications are added when the certification event fires. I’m unable to locate documentation that describes this behavior and determines if the certification event should add to an existing group, or create a new certificationGroup. Does anyone know the logic behind this behavior?
All certifications generated by the same Certification Event are listed under the same CertificationGroup on Setup > Certifications. SailPoint states this directly in the Certification Event docs.
@kevinwoodbury This is OOTB behavior of cert events. Could you please specify what is your requirement?
We had a similar requirement, but we didn’t use the events. We created a certification definition and then used a rule runner to launch campaign programmatically for all movers happens in a day. So one campaign per day.
When the certification event fires, IIQ looks for a CertificationGroup already associated with that Certification Event definition.
If one exists and is still active (i.e., hasn’t been signed off, hasn’t completed its phases, hasn’t been archived/expired), the newly generated certification gets added into that existing group.
If the previous group has already moved to a completed/signed-off/expired state (through normal phase progression, automatic closing, or manual sign-off), IIQ can’t add to it anymore — so it creates a brand-new CertificationGroup to hold the next batch of certifications.