Hello, is there a way to make sure that access requests for Entitlements within a SCIM SaaS Connector are batched? We currently see that the default behavior when requesting Entitlements directly is for each Entitlement to get its own request in the Request Center.
Interestingly, when requesting an Access Profile, IDN is capable of batching all the Entitlements within the Access Profile into a single request in the Request Center.
As I know each access item is processed separately during an access request. For example, if you request two access profiles on the same source in ISC on the same request, the system does not batch all entitlements from both access profiles together. Instead, it processes each access profile independently.
For each item, ISC applies the provisioning process (expansion and filtering), builds a provisioning plan by grouping the entitlements of that specific access profile, and then sends it to the connector.
The first access profile may require approval while the second may not, this is one of the reasons why items are handled separately. The same logic applies to roles and individual entitlements.
Therefore, requesting two entitlements in a single request is effectively the same as submitting two separate requests. This is reflected in the submitted requests list, where you will see two separate entries. For example, if one entitlement violates an SoD rule, it will be blocked independently, since each item is processed on its own.
I agree that this behavior can be tricky. We encountered a similar situation with the Service Desk generic connector: when submitting a single request containing two entitlements or two access profiles, two separate tickets are created.
Regarding the behavior that you mentionned with the Web Services connector, have you tested by submitting two entitlements in the same request ?