How to create a Workflow/s that creates an AD group and a workgroup as approvers for that AD group

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Im trying to build out an automation to Create an AD group and a workgroup as approvers for the said AD group via SCIM API endpoint, /LaunchedWorkflows. not sure if there is an existing workflow like LCM provisioning that I could leverage to do that. If so, what would the provisioning plan look like for something like this?

thank you!

2

Hi @maikenapuadanc,

You can use “Entitlement Update” workflow to create group in Active Directory.

Thanks

1 Like
3

Hi Dheeraj,

For Entitlement Update workflow, a plan is needed. what would the typical plan look like for creating Active directory groups?

4

Something like this, 

<Map>

  <entry key="requester" value="spadmin"/>

  <entry key="source" value="UI"/>

</Map>

<AttributeRequest name="sAMAccountName" op="Set" value="eCompensation-xxxx"/>

<AttributeRequest name="distinguishedName" op="Set" value="CN=eCompensation-XXXX,OU=Groups,DC=value,DC=value2,DC=testdomain,DC=com"/>

<AttributeRequest name="description" op="Set" value="Application used for Testging"/>
5

I tried it this way using the SCIM API call for LaunchedWorkflow endpoint.

image
image1482×638 43 KB

does this look right? I tried it but it just produced a taskresult and the entitlement was not created

6

Hi @maikenapuadanc ,

This looks correct, basically for entitlement update there is objectRequest added in provisioning plan except account request.