# Filtered certifications via Workflow

**URL:** <https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, workflows, certifications\
**Created:** [July 16, 2025, 4:46pm UTC](https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427 "2025-07-16T16:46:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shreyas\_nitturkar](https://avatars.discourse-cdn.com/v4/letter/s/53a042/32.png) [@shreyas\_nitturkar](https://developer.sailpoint.com/discuss/u/shreyas_nitturkar)\
**Post date:** [July 16, 2025, 4:46pm UTC](https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427/1 "2025-07-16T16:46:23Z")

</div>

We need to create a workflow that will create an Identity certification campaign and certify only selected access items (roles/ entitlements/ access profiles) when a mover event occurs.  
How can this be achieved via Workflows.  
By default, all accesses assigned to the identity are added to the campaign which is causing the issue.

Only entitlements returned by a search query must be added to the identity campaign.

Is there an alternative approach to handle mover lifecycle event?

Anly leads would be appreciated.

---

<div class="post-metadata">

**Author:** ![sidharth\_tarlapally](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sidharth_tarlapally/32/26178_2.png) [@sidharth\_tarlapally](https://developer.sailpoint.com/discuss/u/sidharth_tarlapally)\
**Post date:** [July 16, 2025, 5:44pm UTC](https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427/2 "2025-07-16T17:44:52Z")

</div>

Hi @shreyas_nitturkar

Focusing only on

> Only entitlements returned by a search query must be added to the identity campaign.

Use the below API to create the campaign :

[Create Campaign API](https://developer.sailpoint.com/docs/api/v2025/create-campaign)  
We can create campaign for given query :

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/a/a/aa0d8199d0237c12c66a1fb1945782464c3244c2.png)

Thanks  
Sid

---

<div class="post-metadata">

**Author:** ![shreyas\_nitturkar](https://avatars.discourse-cdn.com/v4/letter/s/53a042/32.png) [@shreyas\_nitturkar](https://developer.sailpoint.com/discuss/u/shreyas_nitturkar)\
**Post date:** [July 17, 2025, 2:50pm UTC](https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427/3 "2025-07-17T14:50:04Z")

</div>

I am unable to get the access items using a nested query that uses entitlement custom metadata like @accessModelMetadata(valueName:“To be Reviewed”)

Is there a way we can achieve this?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 15, 2025, 2:50pm UTC](https://developer.sailpoint.com/discuss/t/filtered-certifications-via-workflow/156427/4 "2025-09-15T14:50:21Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.