NERM Approval workflow: redirect request back to requester after rejection from any approver

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi everyone,

I’m working with a Non-Employee onboarding process using NERM in SailPoint IdentityNow.

Currently, the approval flow for creating an external user works like this:

  1. The requester submits the form.

  2. The request goes to the first approver.

  3. If the first approver rejects the request, it is sent back to the requester so they can modify the form and resubmit it.

  4. If the first approver approves, the request moves to the second approver.

  5. If the second approver rejects the request, the request is currently sent back to the first approver.

What I would like to achieve is a slightly different behavior:

  • If the request is rejected by either the first or the second approver, it should always be sent back to the original requester.

  • The requester should then be able to update the form and submit it again.

  • After resubmission, the approval process should restart from the first approver.

Is there a out-of-the-box way to configure this behavior in the NERM approval workflow?

Any suggestions or best practices would be greatly appreciated.

Thanks in advance.

2

Hello,

Please verify this approach

image
image610×300 10.5 KB

If the approval is rejected (you may need to introduce an approved/rejected attribute or find a way to pass it as a condition), try using the ‘Run Workflow’ option, which will execute the workflow from the SUBWORKFLOW.

image
image497×206 4.55 KB

In our case (we have it for leave date attribute, when it is earlier than start day) we close the old session and start a new one.

I hope this helps guide you to the solution you are looking for.

3

Hi,

If I use an Approval Form action, it seems that when the request is rejected, the workflow does not continue to the next action or condition. Instead, it appears to return to the previous step.