Check for Pending Access before submitting Access Request

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hey all!
I just wanted to run this past everyone before I got too far in the weeds. I’m curious how everyone is going about solving this problem…

I need to check if an account has a Pending Access request for an Entitlement (or set of Entitlements) BEFORE I submit an Access Request for them… This is to prevent duplicate Access Requests from being submitted.

How are YOU handling this conundrum? Are you using Workflows? Building your own applications? Using custom scripts? I know some of these requests come from ServiceNow…

Are you utilizing the list-pending-approvals | SailPoint Developer Community API manually???

2

If user requested a pending request and system will allow user to submit it, but it wont process the second request as it is already processing.

Using a workflow is something is possible by Subscribe to “Access request Submitted” Trigger.

3

I hadn’t really given it much thought since it is a feature out of the box as specified by @nandambk. Ideally, when a request is pending, another request for the same access and the same user should not be possible on the UI or should just be ignored.

Are you seeing a duplicate request go out instead of it being silently ignored? How are you requesting the access and what type of connector is involved in the access provisioning? This might help get some more context as to why the duplicate request goes out even in a pending state.

4

Hi @Bakhari ,

In the provisioning flow in expansion & filtering steps, with filtering ISC remove all entitlements that user already have or if another resquest is submitted for the same access.
In our case we do nothing and just we just explain this behavior in our customer’s.

5

Yeah, most of these requests come from ServiceNOW. However , during testing, I’m using this API to submit requests:

It says in the documentation that:

image
image824×240 34.5 KB

Is there another way to submit Access Requests to Sailpoint NOT using this API for SNOW? I thought this was the way to do it…

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.