IdentityNow FORMS vs Access Request

[AndreaQueiroz50 (Andrea Queiroz)]

Hello All,
We have a use case in SailPoint IDN where we want to ask the user for a consent (an IDN FORM sent to the user via email) before the access request review.
I also need to capture the user response in a way that if the user doesn´t consent then the workflow should be interrupted and the request should not be sent to the reviewers.
Is there a way to add this FORM before the access request review?
Thanks in advance.
Andrea.

[vguleria (Vikas Guleria)]

Hi Andrea,

Welcome back to the community. I think it is quite an interesting use case and I remember there was a very interesting demo presented during developer days 2024 which you may try to watch and make use of the similar logic.

Building advanced workflows

[Building advanced workflows] Description Interested in getting advanced with workflows on the Identity Security Cloud? Join Colin as he teaches us best practices, tips, and tricks to master the art of building workflows in IdentityNow. Whether you’re a novice or an expert, join us to learn just how advanced your workflows can be! Additional Resources Here is the blog post that provides links to the workflows JSON and a step-by-step guide on how to implement the use case I demonstr…

You may need to tweak your logic a little bit and probably have multiple empty roles setup initially without approval and then once the user consents then trigger the request for the relevant actual role via workflow.
If user does not give the consent then you may remove this empty role from workflow for the user. But i think it might work provided the number of such roles are not too many.

I hope this helps, if any issues, please let us know.

Thank You.
Regards
Vikas.

[colin_mckibben]

The video that Vikas linked you to will show you how to use forms. You will also want to read this blog post to learn how to use the request response type trigger to intercept access requests and dynamically approve/deny them before they are sent to an approver.

Implementing A Request Response Type Trigger in Workflows

[DevCom-VideoTemplate - Copy_Marketplace-Gradient_Tutorials-Blue] At the time of this writing, SailPoint Workflows does not have native support for our request response type triggers, such as the Access Request Submitted trigger. However, there is a way to implement request response triggers using the current capabilities of Workflows. This guide will demonstrate how to configure a Workflow that can successfully receive events from the Access Request Submitted trigger as well as respond wi…

Here’s how your workflow should work at a high level:

1. Use the Access Request Submitted trigger to intercept an access request. The above blog will show you how to do it.
2. Send a form to the user asking for their consent. The video that @vguleria links to will show you how to do that. If the user approves, then you can respond to the event trigger by approving the request. If they deny, then you can respond to the trigger by denying the request, and it won’t go to any additional approvers. The blog I shared above will show you how to respond to the trigger.