ISC Custom code to process complex events

[pradipniladhe1 (Pradip Niladhe)]

Hello All,

With SAP HCM as the HR system, the user lifecycle event data is coming in JSON format. We need to process the JSON data to take appropriate actions based on the events contained within it. Due to the complexity of the use cases, it’s difficult to implement this using workflows(limitations) or build map rule(time consuming). Keeping future complex use cases in mind, we’re considering developing custom code to handle these complex scenarios.
JSON Data Format Example :

{
    "Actions": [{
        "ActionTypeCode": "01",
        "ActionTypeName": "Hiring",
        "ReasonCode": "",
        "ReasonTypeText": "",
        "ActionStartDate": "2021-05-27",
        "ActionEndDate": "2022-06-06",
        "EmployeeNumber": "12345"
    }, {
        "ActionTypeCode": "10",
        "ActionTypeName": "Leaving",
        "ReasonCode": "11",
        "ReasonTypeText": "No Specific Reason",
        "ActionStartDate": "2024-04-16",
        "ActionEndDate": "9999-12-31",
        "EmployeeNumber": "123456"
    }]
}

Note: we are not considering cloud rules because they require deployment by SailPoint, and difficult to debug the logs.
Given that we have robust ISC APIs, we have two options under consideration.

1. Deploying a REST web service on the server within the network, which would be called from the workflow during an attribute update.
   However, as we understand it, making an HTTP call from a workflow would initiate a web request, which wouldn’t go through the VA tunnel. Since the server is within the network and there’s no external connection, this would cause the connection to fail.
   Question: From ISC, is there any option available to send HTTP request through VA?

2. Deploying a microservice on AWS Due to this connectivity issue, we’re now exploring this option and calling it from the workflow.

Which option will be best in this scenario. I am looking for suggestions.

Thanks,