How to send an email notification when revoking an access in a Certification Campaign?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi everybody,
this is about a Certification Campaign that I need to create for an application that has accounts and permissions in several databases, per country and department.

Since the database model is very complex to make possible an automatic update when an access is revoked, the revoke action should send an email notification to a governance group defined per country and department.

How is the best way to do this? API or Workflow or what?

Thanks a lot, Andrea.

2

This complex logic would best be served by using the provisioning action completed trigger in either a Workflow or by creating a custom web service to act on the events. You can fine tune the trigger filter to only respond to events that target a specific source and account attribute, and you can leverage the IDN APIs to fill in the gaps, like which governance group to send to.