Help for Emergency term Workflow using interactive form

Hi everyone,
I am looking to implement emergency term workflow using interactive form. The goal is that HR would lauch the interactive form in sailpoint and then the workflow would trigger and update the lifecycle state to terminated of the identity submitted by HR.

Currently, the interactive form only has select name required for HR to submit during the emergency termination. However, there will situations where identities with same names exists in sailpoint and would like to avoid terminating the wrong identity.

For that reason, I would like to add workday ID as the unique identitfier for HR to submit in the form.

In the workflow below, the get leaver (get identity) action only works with the name input from the form.

If I wanted HR to submit the workday ID instead of Name, Is there an action I can use instead of the get leaver details (get identity) action? The get list of identities maybe another option im thinking. Would love to hear suggestions!

How about using business unique identifier in the Form like Workday FILENUMBER attribute which is a unique value and majorly considered as employee number. It could be common across different systems like Workday, ISC and other downstream applications. This way the form will not depend on a specific system unique identifier instead it progress with common unique identifier known by everyone like HR, IAM, HelpDesk, etc.

I would say based on the name , show all the relevant information of the user in another form ( those values can be retrieved from the workflow and populated in another form ) so that HR will know all the required information before user is terminated .

Yes. the file number is the workday ID in this case. I am just looking for a way to use that in the workflow. The get leaver action throws a 404 not found error when using file number. Wondering if get leaver details only accepts the select identity name only.

I wanted to use just one form/workflow to perform most of the actioning. One option was to also compare data input by HR in the form vs the data of the identity and only then execute the workflow. But I would like to use the workday id/filenumber submitted by HR instead of the select name

That also is good option , I would say show more information so that even though showone put in wrong info that would be able to see name , manager , bu and other attributes that who is relaly getting terminated.

I’m putting my thoughts here, see whether it helps you.

  1. Form: Get any unique input of an identity (Workday ID or employee Number)
  2. Workflow:
    > Trigger: Form Submitted
    > Action - HTTP Request: SailPoint Search to get the identity’s ID by using form input. This is required since the form doesn’t sent the Identity’s ID which is required for Get Identity action.
    > Action - Get Identity: Get identity details by passing identity ID which you got from HTTP Request action and process with other actions.

Thank you.

From what I understand, the flow should be like this:

My http post search api has this body:

What goes into the get identity action? I haven’t done this piece before.

It should be $.hTTPRequest.body.id to pass the Identity’s ID from the HTTP Request action response.

I updated that. I am getting the error below:
{“error”:“expected top-level JSON object in string, got unsupported structure (type: Error Parsing Activity Output, retryable: false)”}

Also, the filenumber/workdayid I selected in the form is not the same in the logs which is very odd.

You need to debug one step at a time. I need to step back on what I have given earlier, the response of Search API is an array of object, so you need to extract the id of an identity from the JSON array and use it in Get Identity and also you need to handle the multiple identities from Search results.

We’re looking to implement something similar and have exact same issue with the user dropdown showing limited information.

Ideally we would like to utilise a different identity attribute to enable this search (such as Employee ID number).

Additionally, is there an option to do a “are you sure” or “please double check” prompt prior to submitting where we can display the user information?

Yes. It looks like it needs to go through a loop and then compare values and then use it in getidentity.

1 Like