Identity Create Workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello Team,

I have created a working workflow that I would love to share which fires off a email wit the account and password to the manager when the account is created. This works great for default setting on any account. However I am trying to limit it only to one source which the system keeps telling me a invaild json expression and will not me pass. I have not seen any exsample in white pages or ingeneral and wanted ask if anyone had a eye what is not correct below.

I have tried on identity create and source create triggers but it won’t pass for some reason

$.accountRequests[?(@.source.name == “SNOW Non-Human Service Accounts Source” && @.accountOperation == “Create” && @.provisioningResult == “SUCCESS”)]

2

Hi @VBsupport,

Have you tried this on the Provisioning completed trigger.?

$.accountRequests[?(@.source.name == "SNOW Non-Human Service Accounts Source" && @.accountOperation == "Create" && @.provisioningResult == "SUCCESS")]

3

Sadly it did not fire off when i imported a new file with a new record. The records got created in IDN and then AD etc but did not fire off the email.

Do you have any idea or an example that if any accounts get created for the source “XYZ” fire off the email? That would be the simpler path for all but not me for some reason

4

This is something that you can try without using workflows :

The API’s mentioned in the document are replaced by the below ones ;

1 Like
5

Did you replace the filter with your AD source name and try.?

$.accountRequests[?(@.source.name == "Active Directory Source" && @.accountOperation == "Create" && @.provisioningResult == "SUCCESS")]

6

What does your workflow look like? What trigger are you using? You probably want the Source Account Created trigger, which is an early access trigger that requires a support ticket to unlock in your tenant. This trigger would fire anytime an account is created on a source, and the JSONpath filter expression would be easy to implement to filter on a given source.

7

pretty darn basic. I can also open a ticket. i may just use another attribute to just that account type but i rather to the whole source so if account type adds or removes i dont have to update the WF

image
image685Ă—606 25.7 KB

8

The identity created trigger doesn’t provide the source in the payload. It only provides the identity ID, name, and attributes associated with the identity.

If you need to trigger this workflow when an account is created on a specific source, then I suggest the source account created trigger.

Alternatively, the provisioning completed trigger using @jesvin90 's filter expression should work.

$.accountRequests[?(@.source.name == "Active Directory Source" && @.accountOperation == "Create" && @.provisioningResult == "SUCCESS")]

9

Thanks Colin, The white pages really should give sample than just a sample json to help us. Anyhow i decided to use an attribute only for these account types and it is working as needed. Not ideal as i had to create another attribute but gets me what i need

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.