We’re currently working on integrating several identity lifecycle use cases into SailPoint IdentityNow and would appreciate insights or confirmation from the community. A key requirement across these scenarios is quick turnaround time, especially in operational environments where delays can impact productivity.
Here are the use cases we’re exploring:
New direct employee onboarding – Can we configure site-based approvers for access requests?
Role changes (non-privileged to non-privileged) – What’s the best practice for enabling fast transitions, especially during shift work?
Privileged access requests – How are emergency access workflows typically handled to ensure minimal delay?
Leaver process – While Workday triggers standard deprovisioning, what’s the recommended manual process for emergency account removal?
Inactive users (e.g., no activity for 3+ months) – Can SailPoint detect and automatically disable or remove inactive accounts?
Audit logging – What’s the best way to access logs for tracking access changes and privileged role assignments?
Alias support – Can users log in using short usernames or aliases instead of full email addresses, especially for mobile access?
Role assignment automation – What are best practices for assigning roles based on user attributes (e.g., department, location, job title)? These assignments need to be instant to support real-time operational needs.
Any documentation links, implementation tips, or shared experiences would be greatly appreciated!
This is a lot of questions to answer in one topic, so this may get messy. I would consider breaking it up into separate topics.
It would also be good if you included what you have looked at and/or tried so far so that we don’t offer suggestions for things you have tried. It also helps in case you were using the right process, but maybe missed a step or configuration to make it work.
Additionally, if you have looked at other topics here that are similar, linking those so others know what you looked at and why it did not work for your situation can be helpful.
Have you done a search on the forum and/or compass related to the emergency termination process? In most cases this would be a custom workflow with the customer’s requirements included in it. There are many topics here related.
As for Termination Data coming from Workday, it can only come as fast as the scheduled aggregations happen since ISC is pull-based, unless you configure External triggers to kick of workflows from an event in Workday when the change occurs.