Manager approval getting split per item in LCM workflow (approvalSplitPoint issue)

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Hi everyone,

I am working with the default LCM workflow ApproveAndProvisionRequestAccess in SailPoint IdentityIQ.

My goal is to achieve the following approval flow:

Manager should see the entire request in one combined approval task

After manager approval, the request should split by owner

Owners should receive separate approval tasks for their respective items

However, currently the manager is receiving split approval items instead of a combined request.

Current configuration:

  • approvalScheme = owner

  • approvalSplitPoint = owner

Observation:

  • Requests are already split when reaching manager approval.

  • Owner approvals are working correctly after that.

I tried changing:

  • approvalScheme = manager, owner

  • approvalSplitPoint = owner

This resulted in manager approval appearing twice.

Question: What is the correct configuration or workflow adjustment to ensure:

  • Manager approval happens before split

  • Split occurs only at owner approval stage

Is this controlled by approvalSplitPoint, or by the placement of the Pre Split Approve step in the workflow?

Any guidance would be appreciated.

2

Hi @amishra4

Can you check if approvalScheme variable is set differently after you modified, as there is such possibility in LCM workflows.

But if approvalScheme is set only only owner then technically there should not be any approvals routing to manager. This means that there at some place after you’ve set these variables, they are again getting updated which is why you’re receiving manager approval though you didn’t configure it in aoprovalScheme.

If you can trace it via logs, you can also check the value of approvalSplitPoint at that point.

3

Hi @amishra4 , Welcome to Sailpoint developer forum.

It is possible that workflow was launched when variables were not set properly.

Can you try closing existing requests, save Workflow after verification of all variables and then launch it again with below configuration

With this configuration, approval should serially go to manager and then owner.

Also check if there are no more customizations like “Approval Assignment Rule” in your workflow.

1 Like
4

@amishra4 Please trace in the main LCM Workflow and subprocesses, it should tell you what are the initial values of your variables while launching the workflow and you validate the values of approvalScheme, approvalSplitPoint and approvalOwner to see if the values are as expected or not across LCM main workflow and subprocesses.