Leaver Workflow to schedule more Workflows

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , , ,
1

Hi all,

We have a requirement to implement LCM leaver workflow as follows:

  1. first disable the account
  2. After 24 hrs remove the roles
  3. After 5 days we should delete the AD account

How can we achieve this?

Thanks in advance

2

@rishavghoshacc Use the approach below:

  1. In the Leaver workflow, disable the account. Once the Disable Account Step is completed, proceed to the next step to schedule a workflow after 24 hours for removing roles.
  2. Once this is done, link it to another step to schedule a workflow that deletes the AD account after 5 days.

You need to use the Workflow Scheduler API for this.

3

Hi @rishavghoshacc you can easily achieve this because SailPoint provides this functionality by default.

Navigate to Applications → Rapid Setup → Leaver Tab

  1. For Disable Account, you’ll see two options — Now or Later. In the Later option, you can simply specify the number of days.

  2. For Delete Account and Remove Roles, follow the same approach as above.

  3. Check the attached screenshot

image
image905Ă—551 18.1 KB

Thanks,
Raju :expert_ambassador:

4

Hi @rishavghoshacc ,

just in case you already have a custom workflow for the Leaver use-case you will be able to easily achieve that goal by adding appropriate “wait”-steps.
Otherwise the Rapid Setup approach is considered the most efficient approach.

Best regards,
Daniel