We have a requirement during account aggregation where we have configured the logAllowedActions value as:
CorrelateManual, CorrelateMaintain, CorrelateNewAccount, CorrelateReassign, Create, Ignore, Remove.
Once the account aggregation is successfully completed, SailPoint displays detailed information about the accounts that were created, modified, or removed.
Our requirement is to send this aggregation result data via email to the configured recipients. Additionally, we need to attach the PDF report generated after account aggregation as part of the email template. Please check below screenshot for reference.
Could anyone please suggest the approach or supported solution in SailPoint IIQ to achieve this.
Did you think of achieving this via a rule, where you retrieve taskresults and see from that if you can retrieve other attributes like Application, account, action etc. and see if we can fetch attachments as well??
I would suggest the following approach. It does require a small customization because IIQ doesn’t send aggregation results or the built‑in PDF report by default.
The common approach is to use a Post‑Aggregation (Post‑Iterate) Rule to capture the AggregationResults object, format the summary, and then send it via EmailUtil. If you need a PDF attachment, you can either generate a simple custom PDF in the rule or trigger a custom report and attach its output.
In short:
Use a Post‑Iterate rule to read the aggregation results.
We don’t see Post Aggregation rule in our SailPoint IIQ, we are using 8+ version, and after aggregation the data is storing in JasperResult report reference in TaskResult.
Can anyone provide code snippet, if available.
@vin123 You can write a TaskCompletion rule which runs right after every task whether it is success or failed. As per docs: “The TaskCompletion rule is a rule type to support sending an email message to a specified recipient when task execution completes (either in all cases or with an error condition or a warning condition) .“
You need to set below key in the SystemConfiguration.
In this rule, you can check the task names or type on which you want to send emails and write email send block to send the details. Here you’ll have access to the taskresult (result) object which you can access and get the necessary details which you want to send over email.
Do let me know if you need any help writing the rule.
We have tried using the taskCompletionRule. Using this approach, we are able to fetch the attributes (Applications scanned, Accounts scanned, Accounts ignored, and Accounts optimized) only in the email. However, we require a detailed report specifying which account, what action was performed, and completion details, generated as a PDF attachment and sent via email once the aggregation is completed. Below screenshot reference which is highlighted in red colour box is required for us.
Can you please provide the rule if available for reference.
@vin123 This is a JasperReport which IIQ integrate it with TaskResult. I am not sure if it is available to be share it over the email. IIQ store them JasperResult and map it to task result. You should be able to see all the report data in the jasperresult object, we need to find a way to parse the data to a report. I never tried it, but let me see if there is a way to fetch the data or reuse the already generated report.
