How can I trigger a workflow when a user is removed from an Access profile

Hi

I need to create ticket in a third party application for which I need to trigger the workflow whenever an access is removed for user.

Could you please recommend how i can set this trigger?

Try using the ‘provisioning completed’ trigger. You can filter out for sources and attributes as needed to limit it to specific applications and attribute updates

As an example, the below filter is used to limit to failures and for a specific app:
"filter.$": "$.accountRequests[?(@.provisioningTarget == 'appname' && @.provisioningResult == 'failed')]"

Thanks @margocbain, If a user is removed from an entitlement through a campaign would that also show provisioning result as failed?