How to create a certification when identity attribute is changed

I see there is a mover workflow out there already and discussion around this topic.But I did not see any answers regarding this issue.

Below is the response I get :

type timestamp attributes
WorkflowExecutionStarted 2021-12-15T17:25:45.29262051Z {input:{_meta:{invocationId:e0ace943-0340-4ef1-814b-7bf0ad54e72d,subscriptionId:93552ce9-2def-4026-9a59-64174f5598ba,triggerType:FIRE_AND_FORGET},changes:[{attribute:jobCode,newValue:JC00217,oldValue:JC00216},{attribute:myattrib,newValue:,oldValue:null}],identity:{id:2c9180867db49ce6017dbeba605b42e7,name:6000333,type:IDENTITY}}}
WorkflowTaskScheduled 2021-12-15T17:25:45.292661015Z {}
WorkflowTaskStarted 2021-12-15T17:25:45.371056831Z {}
WorkflowTaskCompleted 2021-12-15T17:25:45.420169799Z {}
ActivityTaskScheduled 2021-12-15T17:25:45.420226126Z {activity:sp:create:campaign,input:{body:{campaignSizeType:FULL,description:Please review this identity’s access as they are changing positions.,duration:24h,emailNotificationEnabled:true,name:Mover Certification,searchCampaignInfo:{query:id: 2c9180867db49ce6017dbeba605b42e7,type:IDENTITY},type:SEARCH},description:Please review this identity’s access as they are changing positions.,duration:24h,emailNotificationEnabled:true,identityId:2c9180867db49ce6017dbeba605b42e7,name:Mover Certification},task:sp:create-campaign}
ActivityTaskStarted 2021-12-15T17:25:45.461167736Z {}
ActivityTaskFailed 2021-12-15T17:25:46.357796909Z {}
WorkflowTaskScheduled 2021-12-15T17:25:46.357815124Z {}
WorkflowTaskStarted 2021-12-15T17:25:46.401537589Z {}
WorkflowTaskCompleted 2021-12-15T17:25:46.468213889Z {}
WorkflowExecutionFailed 2021-12-15T17:25:46.468247118Z {error:actionStep(createCertification) Error: task failed: activity error (type: sp:create:campaign, scheduledEventID: 5, startedEventID: 6, identity: 1@669bc760780c@): Post \https://tenant.cms.services.infra.identitynow.com/beta/campaigns: request failed with status 401 (type: HTTP Response Returned a Client Error, retryable: ): Post \https://.tenant cms.services.infra.identitynow.com/beta/campaigns: request failed with status 401 (type: Error, retryable: true): request failed with status 401}

How do we trigger the cert , has anyone been able to do a cert when identity attribute changed.

Where did you get this detail?