8.5
Notify users of Revocation Email is triggered for all the revocations in certification. I am looking to supress some emails if some entitlements(fake entitlements) are revoked.
Is it possible?
@SurjanK I don’t think it is possible. Instead of suppressing email, better to exclude it from certification.
We need this email to go out for all revokes except for one entitlement revoke. We really can’t exclude it at all. We just don’t want to send this notification if specifically one entitlement is revoked
@SurjanK I didn’t ask to turn off revocation notifications, Just exclude fake entitlement from certification using exclusion rule.
Hi @SurjanK - if you can, I’d recommend excluding the fake entitlements from your certification. That way they would not even be presented to the users and no revocation emails would occur given they are not in the certification.
Alternatively if you need to include them, you could use an EmailNotifier class to handle excluding certain emails from sending system wide.
Linking another thread on this with linked docs to setting this up
@SurjanK Would want to understand why do we need fake entitlements in the certification? Do you have any specific usecase?
If there is a different workaround available which can avoid fake entitlements, you don’t need to make changes to suppress revocation notification.
We have injected some fake entitlements to the certification to check the due diligence of the certifiers. We are checking if certifiers are paying attention to what they are approving or revoking. However, we don’t want to send revoke notification of fake entitlements.
@SurjanK In the phase change rule, you can detect if the fake entitlements are revoked, you can change them to approve with a comment and log an entry in Audit for your analysis. in that way, iiq will not try to revoke fake ents and not send the revocation email for those.
Do you have a sample code for phase change rule?
@SurjanK Please check this article: https://community.sailpoint.com/t5/Technical-White-Papers/Rules-in-IdentityIQ/ta-p/78176
You might be interested on “certificationFinishPhaseEnterRule” → this phase change rule while certification moves to end state. Here you already have the certification object, you can try to modify it to change the review status. This pdf also has sample code for reference.
Please try it out.
@SurjanK Please let us know if this issue is still open and any further help.
