Need a workflow that forward pending certification campaign to manager

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hye guys,

I need a workflow that forward all pending certifications of a user to his manager’s manager when manager of the user is terminated.

suppose user is xyz—abc(xyz’s manager)—-lmn(abc’s manager)

Now when the abc is terminated (lifecycle state becomes terminateddisabeled) then all the pending certification should automatically forwarded to lmn(abc’s manager) please guide

2

Hi @Rakesh_Singh_1234,

For the above purpose you can implement the ISC Loop Back Connector. This connector will do the above OOTB. You dont need to write any code for the same

3

I’m not sure how the loopback connector would help for this ask or probably I might’ve misunderstood

@RAKGDS Although I don’t have a readymade workflow template available for this ask, below is how I would approach this workflow use case:

  1. Trigger:
    Use the Identity Lifecycle State Changed trigger with the condition lifecycleState == "terminated" or "inactive"(whatever is applicable as terminated in your tenant). This ensures the workflow starts only when an identitity’s lifecycle state changes to terminated.
  2. Get Terminated Manager Details:
    Add a Get Identity action to fetch the terminated identity’s record and save it as terminatedManager into a variable
  3. Get Terminated Manager’s Manager:
    Use another Get Identity action to retrieve the terminated identity’s manager using {{terminatedManager.manager.id}}, and store it into a variable as managerOfManager.
  4. Find Pending Certifications:
    Add a HTTP Action to “List campaigns” REST API endpoint and check if there are any campaigns assigned to the terminatedManager and state eq “pending”. If yes, the results as pendingCerts. You can store the IDs of such campaigns to be used in next step 5.
  5. Loop Through Certifications:
    Insert a Loop action using pendingCerts as input to process each pending certification individually by using “Get Certification Campaign” action.
  6. Reassign Ownership:
    Inside the loop, add another REST API Call(PATCH/PUT) action pointing at Reassign certifications API endpoint and pass the ID of the managerOfManager which we’ve obtained from step 3. This updates each certification from pendingCerts to assign ownership to the manager’s manager.
  7. Send Notification (Optional):
    Finally, use a Send Email action to notify the new owner that the certifications have been reassigned to them.

Also, after step 4, if the response doesn’t have any pending certs on the terminatedManager, you can exit the workflow to a end step directly.

Thanks,

Arshad.