Enable the bidirectional communication between salesforce and sailpoint IDN

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,
We have the request to enable the bidirectional communication between the salesforce and sailpoint.
Requirement: When a revoke decision is made on certification campaign by the source owner, the user should get disabled/entitlement removal should happen at the salesforce.
Anyone has implemented this and what are pre-requisites other than the Service account permissions.

2

Hi Nandini,

Salesforce does have both Aggregation and Provisioning features.

When you revoke an access in Access Reviews, of course it will be removed. If in case it is the last access then instead of removing that access we can go for disable access using Before Provisioning Rule.

Thanks
Krish

3

Thank you for the reply. So without provisioning feature, when revoke is triggered from sailpoint the access will be removed on target system (Salesforce)? Just to clarify.
Also Service account should have the required permissions to do the task?
Nandini

4

Hi Nandini,
Provisioning feature as to be enabled to revoke the entitlements.

Thanks

5

Thank you Girish for clarification.

6

I am not sure reason behind your query, by default Salesforce connector has Provisioning feature. You can do aggregation (Read) and Provisioning (Write). If you would like to see that, you can Get Source information using Get Source By ID API call and lookout for features.

You can also have a look at the connector documentation.

Thanks
Krish