in one our prod tenants an invitation email to an identity has been sent. We can see the events in events search. But we can not find out who has sent the invitation email. The system is now in a pre PROD phase and only the IAM Admins have access. Is there any possibility to see more about the event about an invitation (is it triggered, or sent manually, if yes from whom, etc?)
I dont think we can get the information on who triggered the invitation. There is a possibility that it triggered automatically after aggregation of identity. Check the identity profile settings.
But regarding the log on who invited I dont think its possible.
I think We will not be able to know who has sent the invitation. But we can know from where that mail is triggered. Org Admin and Helpdesk can invite the user. Admin>Global> Product Branding
check the below screenshot.
Hi @onbir ,
It can be challenging to track exactly who triggered specific events such as sending an invitation email, especially if the event was initiated manually!!
But there are couple of checks you can perform to get additional details.
Try expanding the filters or timeframe to capture additional details about the event.
You can check for Audit logs which ISC captures
You can try to use the API’s to get the necessary audit info
If nothing works out it’s recommended to raise a ticket with SailPoint!