Identity Security Cloud - Conditional Failure of Access Request to Trigger Workflow in IdentityNow

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hi everyone,

I’m working on a somewhat unusual use case in IdentityNow and I’d love to hear your thoughts or suggestions.

We’re trying to configure an Access Profile, Role, or Entitlement that is requestable without an approval workflow, but under certain conditions, we want the assignment to fail intentionally and trigger a workflow that prevents the completion of the provisioning.

The idea is:

  • A user (or someone on their behalf) requests access via Request Center.
  • The request is automatically approved (no approval workflow).
  • During provisioning, a condition is evaluated (e.g., based on identity attributes or external data).
  • If the condition fails, the assignment should be blocked, and a custom workflow should be triggered to handle the failure (e.g., notify, log, escalate, etc.).

I know this is a bit of a reverse logic scenario, but it’s needed for a specific business requirement.

Has anyone implemented something similar or knows if this is feasible within IdentityNow’s workflow and provisioning framework?

Thanks in advance for your support.

Looking forward to receiving your feedback about this.

Kind regards,
Paolo

2

Hi @psalat8887100,
Looking at your use case, it should be doable to via Access Request Submitted Event Trigger.
Also, you can refer to below post from Colin on implementing the trigger using workflows, this should help you intercept the request, check your condition and handle approval or failure accordingly.

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.