Native Change Detection for Created Entitlments

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We want to identify who is creating Active Directory entitlements outside of SailPoint ISC. Our objective is to drive all AD group creation through ISC forms and workflows to ensure consistency and compliance.

Current Setup:
Within the AD source, I’ve configured All non-entitlement attributes to use objectGUID. After creating a new group and running an aggregation, no event was triggered.

Question:
What is the best approach to reliably capture newly created AD entitlements that are created outside of ISC?

Steve

2

Hi @nuffersp Native change detection works only for account operations but not for group operations. Is it possible to add a tag/description that is unique to SailPoint when AD groups are created from SailPoint? so that report can be run

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.