Loopback Connector

Hi all,

I’ve been working with a Loopback Connector in SailPoint to make Workgroups and Capabilities requestable.

  • Workgroup requests: Everything works perfectly; the approval workflow goes to the expected users.

  • Capability requests: Currently, approval always goes to spadmin. I want to change it so the approval goes to a **specific user **.

Has anyone successfully customized the approval routing for capabilities in this scenario? Any guidance would be highly appreciated.

Thanks

Have you or are you able to set an owner on the entitlements that represent the capabilities in the Entitlement Catalog? It sounds like there is no owner when you are going to do the approvals, so the system is defaulting to SPADMIN.

Hi @IslamElkhouly, I just tried the loopback connector now in my env. And it’s working as expected for both workgroups & capabilities, the approval process follows the approval steps in the LCM Provisioning workflow (which is in my case: manager –> owner)

So I’m predicting/thinking that either there is a customization in place for your assignment rule for the approval step, or maybe you are not assigning the correct owner to the capabilities or to the application itself.

Please don’t hesitate to let me know if you need any further assistance (if required) :slight_smile:

Have a nice and great one!

Regards,

Mustafa

1 Like

Thanks a lot! Yes, you’re right — I didn’t have an owner set on the entitlements that represent the capabilities. That’s exactly why the approval was defaulting to spadmin.

GM @muhammad_mustafa , thanks for your help!

I actually forgot to assign the owner for each capability after I ran the aggregation on the loopback application. Because of that, SailPoint took spadmin as the default owner for all capabilities.

Thanks again for pointing me in the right direction!

Is there a way to assign the Owner of a capability automatically during aggregation, using a Rule, instead of setting the owner manually in the Entitlement Catalog after aggregation?

more than welcome @IslamElkhouly :folded_hands:, glad that you resolved it!

yup you can via Managed Entitlement Customization Rule in the connector Rules

1 Like

Thanks for your help.

@IslamElkhouly Welcome anytime!