Form to be displayed on Rejection

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

8.4

I have created a workflow with a lifecycle event to delete the AD account after 90 Days,I have created a business process (workflow) that deletes the AD account.

Now I want to add an approval process, if the manager rejects the deletion, it stops the workflow, and I want to add a form on the rejection process only to set a Date where this will be processed again.

Below is my current setup:

workflow.xml (21.5 KB)
Delete AD - Approved.xml (2.7 KB)
Delete AD - Rejected.xml (4.5 KB)

The problem is:

  1. When I reject the approval, it never shows the form.
  2. It also goes through and deletes the AD account.

Any insights on what could be the problem. Here is some logging: Also im seeing that the same script is being called twice in the same workflow.

2024-08-12T11:09:41,870 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Starting script.
2024-08-12T11:09:41,871 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Approval object is not null.
2024-08-12T11:09:41,871 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Approval contains approval items.
2024-08-12T11:09:41,871 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Approval is not rejected. Returning true.

2024-08-12T11:09:42,255 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Starting script.
2024-08-12T11:09:42,255 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Approval object is not null.
2024-08-12T11:09:42,255 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Approval does not contain approval items. Returning false.
2024-08-12T11:09:42,255 DEBUG http-nio-80-exec-6 sailpoint.ApprovalCheckScriptAccepted.WorkflowRule:166 - Returning false as no conditions were met.
2

Hi @AhmedWaleed,

can you try to use this order for transition?

image

1 Like
3

Hi @enistri_devo,

That worked, but in the wrong way, I though IsRejected() while return true if it was rejected but it seems it will return false.

Also the account still gets deleted.

Any idea how could that be handled?

1 Like
4

good.
In you case a Delete event launch this workflow. In case of reject you need to change or delete the plan for dont send the delete operation.

So, in Rejection Form step you execute the code for change/delete the plan. For choose the correct step you can use ref:approved or !ref:approved.

Take a look to Identity Update workflow, its a good example, or you copy it and change.

5

@enistri_devo Thank you so much.

You helped alot.

1 Like
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.