NERM Automated Workflows

Hi,

I have setup a simple Automated Workflow that will set Profile status to Inactive if the Profile End Date is in the past. The workflow has only two actions, Status Change and Update. This workflow has been in the system for quite a few days now but I do not see it taking any action on the profile. The lifecycle activity doesn’t show any executions. I have another end date expiry warning workflow too, that is also not triggered.

  1. As per the documentation, automated workflows are executed once a day. Is nightly automated workflow execution enabled for all NERM tenants by default? If not, how to enable it?

  2. How can i make sure that an automated workflow execution was actually triggered or not?

  3. Is there any way to troubleshoot / test the automated workflows or find history of their executions?

Hi Sharvari,

You can see the timing for Automated Workflows here: Support Articles - [Non-Employee Risk Management] Automated Workflow Timing (sailpoint.com)

  1. Automated Workflows should trigger every day at the set time defined above. That trigger is built into our system and is enabled for every tenant. You can enabled / disable specific Automated Workflows but you can not disable the time trigger in total for the tenant.

  2. We do not have a display that shows specific if the Automated Workflows were triggered. The main logging for this would be in Admin > Lifecycle > Activity - which is where you could see if a workflow was executed.

  3. We do not have currently have a way to do a test run of Automated Workflows. There is an open Idea for that in our portal here: Ad-Hoc run Automated Workflows from Admin | SailPoint Ideas Portal . As a work around, you can create a Batch workflow that mimics the same Actions / Filter scope to run the workflow against the same profiles that should have been found with the Automated Workflow.

Are you able to share the Profile filters of the Automated workflow (Under the “Info” tab) so that we can see how it is trying to find profiles?

1 Like
  1. I think so, at least I see automated workflow running in my tenants.
  2. If the condition on which you are running is true, the workflow will run. You can run the automated workflow as part of create or update to test whether there is any error or not in the workflow though that depends on the condition you have added in your workflow.
  3. For history, you can look at the activity tab to see all the workflow executions.

These are the filters i have applied.

I verified again and there is no activity in in Admin > Lifecycle > Activity for this workflow, does this mean it was not triggered at all? For some reason i think our automated workflows are not running nightly.

Also, do you know if automated workflow run jobs are scheduled for Partner NERM tenants?

1 Like

From those filters, this will run on People profiles that are Active and have an Assignment End Date that is yesterday or before. Normally, something like “Assignment End Date” might not be stored on a “People” profile - instead it would be on an “Assignment” profile.

Are you able to confirm that there are People Profiles in your tenant that have an Assignment End Date in the past ?

Automated Workflows for Partner tenants should follow our US timing - so 7am UTC / 3 am ET.

Yes, I do have them set for people profile.

@ZackTarantino-Woolson
Is there any further troubleshooting I can do before reaching out to [email protected]?

The configuration looks like it should function and my attempt to recreate this in a tenant on the Partner cluster works as expected…

So, I’d say reach out to the support team so that we can look at your specific tenant and data to troubleshoot here. We can come back to this thread with details about what we find as well!

This has been identified as a bug and the engineering team is working on it. It is an intermittent issue with the automated workflow execution in the Partner tenants. We are working with the support team to get this resolved.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.