Hello @fabienne_florian,
Not all JSONPath libraries supports the ‘in’ array syntax. I’m not certain whether ISC does or not, but please validate this by changing that part to == and || and retry.
$..accountRequests[?(@.provisioningResult == "SUCCESS" && @.provisioningTarget == "Azure testinfra tennant")].attributeRequests[?(@.operation == "Remove" && (@.attributeValue == "a3f48ba1-7114-4b96-ba77-102def475630" || @.attributeValue == "900653c7-2d4b-4af7-849d-944544b6479b" || @.attributeValue == "9023471e-324b-46aa-9277-f1e78ae5f473" || @.attributeValue == "633b3fbd-d20c-4191-8d88-35a645ba2657" || @.attributeValue == "c8a11341-3130-4266-bafa-f0fc9cf10144" || @.attributeValue == "dda55e6c-5520-4274-b812-f1beff94b954" || @.attributeValue == "5ea1a315-1759-4c7c-aa79-7c0d784c0c84" || @.attributeValue == "90726444-fc90-47d5-bdd3-ac1134d747b8" || @.attributeValue == "df4e5b78-da32-41a9-8bc6-ee83e3beab64" || @.attributeValue == "1b74a09e-6549-4e76-9d98-bbd79532f32b" || @.attributeValue == "ffb1e4c0-5354-4cb3-ae8e-45dece96eb99"))]
For the name of the entitlement, use a HTTP Request Action (Using Workflow’s HTTP Request Action to Work With IdentityNow APIs) and call GET /beta/entitlement/{entitlement-id} endpoint (Get an entitlement) and extract the name from the response.
I also noticed on the workflow docs-page for Provisioning Completed that the sample JSON had "provisioningResult" : "committed". I’m not sure whether it is committed or SUCCESS that is expected. To force an invocation of the workflow you could loosen the trigger filter a bit, and instead use a Verify Data Type to examine the input - or even more extreme: You could run the “Provision Complete” into a “Send Email” to examine the results of your JSONPath.
For further assistance, please attach your JSON of the workflow.