I hope all doing good. There’s one Incident we received which caused by end user submitted an Identity Request in SailPoint IIQ with more than 100 request items, which crashed the UI server continuously for more than a week. To resolve the root cause, we have to limit each SailPoint IIQ Identity Request not allowing more than 20 request items.
Agenda is to “Limit each Identity Request in SailPoint IIQ to not carry more than 20 (exclude) request items”. Please advise.
Could you please help us how to do it if anyone knows it. Thank you in advance.
@Venu1010
You have two ways to do this, either come up with a custom plugin or have a advanced SOD policy , in this you can check existing identity and new identity and compare the number of new entitlements in the new identity is more than 20, throw an exception saying you cannot submit more than 20 items.
as per my experience the easiest way to achieve this is to set up a policy which is checked during the request process (you’ll have to modify the workflow and enable policy checking - very likely to “interactive” mode).