Need Suggestion and ideas on an Access Request form

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Hello Team,
I want to create an Access Request form for a XYZ application. The application is not in SailPoint. So my understanding is access will be granted based on AD entitlements.
Can’t use SailPoint QuickLink functionality?
Thinking of using OOB Manage User Access but have very less understanding about it.
Can anyone help me with this, some documentation if anyone have.
Thank you

2

Hi @j1241,

Simplest way will be to implement it via quicklink and which in turn will call workflow which can perform everything that you need.
Please find the reference document given below. Let me know if further input needed.

https://community.sailpoint.com/t5/Technical-White-Papers/Quicklinks-7-1-and-later/ta-p/78197

Thanks

1 Like
3

Hello @ashutosh08

Can we make changes to OOB Manager User Access Form?
Like adding a workflow.
Just curious.

4

@j1241
Your ask is not very clear. When you say the application is not in Sailpoint, does this mean access to the application is not maintained by sailpoint?

If yes, can you please elaborate how do users get access to the application? Is it through AD memberships or direct memberships (mainitained by application itself)?

5

Hello @soswain

Yes, the access to the application is not maintained by SailPoint.

The users request access through ticket then ticketing team adds the access to the user.

6

@j1241
To achieve this

  1. onboard the application as a disconnected application (mostly a csv).
    You can export the data (user and access details) from the external application and put it in a shared location. The delimited application will read the details from the shared location.
  2. Run account and group aggregation to pull the user and their access details as well as create entitlements for the application.
  3. Create SNOW or any other ticketing integration in sailpoint under IntegrationConfig and add the delimited application. This means when there will be any kind of provisioning request generated for the application, it will go through the Integration Config.
  4. Raise the access request for one of the entitlement for the application and IIQ will create a request ID along with a ticket in the ticketing system and poll the status periodically.
  5. Run the account aggregation once the ticket is closed in ticketing system and the request will also be marked as completed in IIQ.

Hope this helps.

7

Hi @j1241,

Making changes in manage user access form is possible with UI changes but it is not recommended.

If there is some business use-case that you want to achieve via some custom form, then ideal approach will be to use quicklink as it is given as a hook for customization.

Also, the ideal approach to manage any application will be to onboard it in SailPoint, if for some reason it cannot/should not be onboarded then you can go ahead with using quicklink approach.

Let me know if further clarity needed.

Thanks

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.