Custom approval for new account

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

8.4

Please share any images or screenshots, if relevant.

Please share any other relevant files that may be required (for example, logs).

Share all details about your problem, including any error messages you may have received.

Hi,

I am trying to add a second level approval in custom workflow.

Firstlevel approval - I leveraged securityofficername and it is working as expected.

Secondlevel approval - I need to send to constant workgroup. I tried to give the workgroup name in “approvingIdentities”. But request is not getting routed to second level approval instead it gets completed.

Can you please suggest what am I missing in this case.

2

what have you selected for approvers?? is it specific identities/Workgroups?? or something else?? Please select specific identities/Workgroups in the process variable of approvers and try again.

3

Hi @Preethi ,

Make sure the approval scheme is ‘securityOfficer , Identity’ , approvalMode is serial and the approvingIdentities variable is populated with a valid workgroup name.

4

Hi @Preethi

Open the workflow from the backend → add a Rule to the approvingIdentities variable in that rule implement your logic and just return the workgroup name.
Please find the snippet.
In Workflow add this:

<Varibale initializer=“rule:Test Rule - RajGopal” input=“true” name=“approvingIdentities”/

Rule:

<?xml version='1.0' encoding='UTF-8'?> A rule used by a Workflow to determine a step action or variable value. 
Note that an Attributes map of all variables from the current WorkflowContext, merged with the arguments from the Step, is also passed into the workflow rule.</Description>

import sailpoint.object.Custom;
import sailpoint.object.Identity;
import java.util.List;
import java.util.ArrayList;

private List getApprovals(String department){
log.error("Selected Department is:- " + department);
Custom approversList = context.getObjectByName(Custom.class, “Approvers-Multilevel”);
List finalapproversList = new ArrayList();
String secondLevelApprover=null;
String thirdLevelApprover=null;
String firstLevelApprover=null;
if(approversList == null){
log.error(“No Such custom Object Exists”);
return;
}
if(department != null && department.equalsIgnoreCase(“Technology Infrastructure”)){
secondLevelApprover = (String)approversList.get(“secondLevelInfraApprovals”);
thirdLevelApprover = (String)approversList.get(“thirdLevelInfraApprovals”);
}
if(department != null && department.equalsIgnoreCase(“Cyber & Information Security”)){

  secondLevelApprover = (String)approversList.get("secondLevelCISApprovals");
  thirdLevelApprover = (String)approversList.get("thirdLevelCISApprovals");
}
if(department != null &amp;&amp; department.equalsIgnoreCase("Technology - Application Development")){
  firstLevelApprover=(String)approversList.get("firstLevelApplicationApprovals");
  secondLevelApprover = (String)approversList.get("secondLevelApplicationApprovals");
  thirdLevelApprover = (String)approversList.get("thirdLevelApplicationApprovals");
  finalapproversList.add(firstLevelApprover);
}

if(secondLevelApprover != nulll &amp;&amp; thirdLevelApprover!=null ){
  log.error("Second level approval is:- " +secondLevelApprover);
  log.error("Third level approval is:- " +thirdLevelApprover );
  finalapproversList.add(secondLevelApprover);
  finalapproversList.add(thirdLevelApprover);
}

if(!finalapproversList.isEmpty() &amp;&amp; finalapproversList !=null){
  return finalapproversList;
}

}

String department = workflow.get(“department”);
log.error("User Selected department is:- " + department);

if(department != null){
log.error(“Executing the getApprovals() method…!”);
return getApprovals(department);
}

Note:
Here I am sending 3 levels of approvals based on the user department.
Let me know if you facing any blockers.