Hi,
Is there any unique identifier in Sailpoint that allows me to track a work item and which Campaign ID it relates too? It seems as though I can find items but I cannot figure out how one would match work-items with completed or pending work-items/events as there does not seem to be a UID between the datasets.
Cheers,
Adrien
You should be able to use Certification reports for tracking remediated item status
Yeah unfortunately that isn’t good enough as that only get’s updated only if you have automated deprovisioning. If I want to track a lifecycle of a work item created by a Campaign and whether the business has a manual process or an automated one there is nothing in the event logs that clearly indicates that this work item is relevant to this certification campaign unless I start comparing ‘Account Name’ and ‘Source Name’. But unless I concatenate those, it is isn’t much of a Unique identifier. So aside from what I am getting from either the UI reports or API reports are there any other hidden attributes or columns of data that SailPoint are not allowing us to see that makes this connection?
For example below there is just limited or no Unique Identified I can use to track what is what between a work report and a campaign status report. Luckily for me my data is perfect and I can clearly see they match, but that’s not the point. If the data isn’t good and the Account Name and Account IDs are not good then there needs to be a UID somewhere that says John.Smith in Campaign has an ID of 123456 and Work item related to John.Smith is 123456, which matches.
Now I did notice that Work Items have Tracking Numbers and Event IDs however they are unique per work items and share no pattern on how they are generated. Is there something in those IDs that allow me to distinguish it from which campaign they originate from?
As per my understanding there are no such hidden variables available, at least the API outputs don’t reveal any.
If you think from a workaround perspective, the problem you have mentioned would only ever happen if you have multiple certifications open for a single application, which logically shouldn’t be happening and can be avoided by setting such process and in a normal scenario you would always be able to match revoke workitems with a campaign status report.
Though it might be worthwhile checking with SailPoint support if they have an automated solution here.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
