New Capability: Workflow Triggers for Lifecycle State Changes

Description

We’ve added new event triggers specifically for Identity Lifecycle State changes. These triggers are now available in both the Workflows and Event Triggers, giving admins more flexibility and precision when building automated processes tied to identity state transitions.

New Capabilities

Two new workflow triggers:

  • Identity Lifecycle State Changed
    Fires when the identity’s cloudLifecycleState attribute changes (e.g., from Active to Inactive).
    (It offers a more targeted alternative to the broader Identity Attributes Changed trigger.)
  • Identity Lifecycle State Change Processed
    Fires after the system evaluates and processes any configured actions for the lifecycle state change, even if no changes to access were made.

These triggers are now available under:

  1. Admin → WorkflowsTriggers selection

  1. Admin → Event TriggersAvailable triggers

Who is affected?

All Identity Security Cloud customers.

Action Required

No immediate action is required. To start using the new triggers, navigate to Workflows or Event Triggers and select ‘Identity Lifecycle State Changed’ or ‘Identity Lifecycle State Change Processed.’

Important Dates

  • Sandbox Rollout: July 7th, 2025
  • Production Rollout: The week of July 14th
Calendar

:bangbang: By RSVP’ing to this event you will be reminded of this release prior.

9 Likes

Thanks for adding new triggeres. I see this new Identity Lifecycle State Change Processed trigger. I was looking for the documentation for this trigger and a sample payload but I was not able to find it in Workflow Triggers - SailPoint Identity Services. Can I know when this will be updated.

Hi @udayputta ,

Official public documentation will be published when this becomes available in the Prod environment next week.

I still don’t understand why you guys don’t release documentation alongside the sandbox release of the functionality? Is there any actual reason for this? Just to intentionally make things more confusing and make testing new features in sandbox more difficult before prod release?

Either way we’re happy to see new triggers getting added even if one of them is a lesser copy of another existing trigger. Still patiently waiting (begging) for a generic fire and forget access request submitted trigger to be added.

Hi @benjaminoriold!

We understand the desire for documentation for staging releases. However, the content at documentation.sailpoint.com is the legal warranty of the product. Since features in staging are not fully rolled out, they are not included in the legal warranty until prod releases.

We are currently investigating how we can improve our communications around upcoming releases and appreciate your patience as we continue that work.

Thanks for clarifying Rachel, that’s a very weird setup, good to hear it’s being worked on. Just a separate documentation page that’s not part of the warranty for things that are in sandbox but not production yet would be awesome.

Honestly, whats the difference between Attribute change and these?
What is the New?

Hi @ipobeidi ,
These are more targeted than the Attribute Changed trigger and focus specifically on lifecycle state transitions.
Think of the new triggers like this:

  • Identity Lifecycle State Changed - before provisioning
  • Identity Lifecycle State Change Processed - after provisioning

Can someone help understand why Lifecycle State Changed trigger could still be useful when the current Identity Attribute Changed trigger can be repurposed with a simple filter to only look for cloudLifecycleState? I mean, is there any difference except for the cosmetic change?

2 Likes

@NataliaYunusov

Will a lifecycle change event, trigger Identity Attributes Changed and Identity Lifecycle State Changed both and we get to choose which one is better for a use case?

2 Likes

Hi @sharvari,

Correct, if your use case only depends on the lifecycle change event, you can use the Identity Lifecycle State Changed trigger directly, rather than using Identity Attributes Changed and filtering for lifecycle state.

1 Like

Hello,

I am not able to find the Lifecycle State Changed Trigger documentation. Has it been made available yet?

Regards,

Joey

Hi @jlarkin ,

Yes, the documentation has been updated for both triggers: Workflow Triggers - SailPoint Identity Services

Thank you,
Natalia

Hi Natalia,

Thank for your quick response. Is it possible to update the JSON to include more identity fields, such as Username? The Sailpoint Identity GUID would not be useful for our use case.

Regards,

Joey

Can you give an example of the jsonpath filter for newlifecycleState? I am assuming we don’t have to filter on any identity attribute for this.

Is there an action item that allows you to change the lifecyclestate of an identity?