Is it possible to send New Hire letter/E-Mail to the user's Manager with AD account ID and password with Workflows in ISC?

[Prashanth1812 (Prashanth Pullammagari)]

Hi team,

We are trying to see if there is a new hire process to send E-Mail with creds to user’s manager upon hiring using only Workflow approach (No global rules involved) in ISC. Please let me know if you know an approach working best for you or someone/org you know. TIA.

Note: If there is a WF approach which is working, we need a config to create random password which should work with the password policy in workflow steps.

[JackSparrow (Theja C)]

Hi @Prashanth1812, if password for AD account is created from SailPoint, it’s not possible to get the password in plain text as SailPoint will encrypt it. So, there is no way to send password over email.

Check this post if you want to send other details to manager via workflow.

Sending AD credentials of new hires to the line manager Workflow

Hi All, Iam creating Workflow for sending new hires AD accounts credentials to their line manager upon creation. Below is the workflow i used. [image] [image] [image] the issue iam facing is in get identity1 as it is returing the manager ID (ex:63) but i need the manager reference ID to be used in the API. {“displayName”:“Get Identity 1”,“input”:{“id”:“63”,“method”:“GET”,“path”:“v3/identities/63”,“service”:“mice”},“stepName”:“getIdentity1”,“task”:“sp:get-identity”} i need it to be lik…

Check this post to set the AD password using after rule and then send email.

Send Password to user through email on new Active Directory(AD) account Creation

You can handle this in an AfterCreate or AfterModify (operation Enable for rehires) in PowerShell. Add-Type -AssemblyName System.Web $pass = ConvertTo-SecureString $([system.web.security.membership]::GeneratePassword(16, 2)) -AsPlainText -Force Set-ADAccountPassword -Identity $nativeIdentity -NewPassword $pass -Confirm:$false Set-ADUser $nativeIdentity -ChangePasswordAtLogon $true $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($pass) $Password = [System.Runtime.InteropServ…

[gourab (Gourab Sadhukhan)]

Hi @Prashanth1812
Custom solution can be used here.
Once an account is created, you can utilize Account After Create rule(Before and After Operations on Source Account Rule | SailPoint Developer Community) to trigger a PowerShell script. This script can be used to:

Generate a password—>Force set the password in target system directly–>sends email to manager using SMTP
but this approach depends on the target system you are using. For AD it is doable.

[Prashanth1812 (Prashanth Pullammagari)]

thanks @JackSparrow Will check that out.

[Prashanth1812 (Prashanth Pullammagari)]

thanks @gourab, will look at the approach mentioned above and update here, how it worked for us.