Policy Violation revoke entitlement is not removing on account for disconnected application

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.3p1

Share all details about your problem, including any error messages you may have received.

Policy violation owner is trying to revoke the disconnected application entitlement, after revocation entitlement is not removing on the account level. Can you please suggest on this issue.

Thanks,
Deva

2

Hi @deva_sp ,

A disconnected application does not support any write operations, meaning entitlements will not be automatically revoked. Instead, a Manual WorkItem will be generated. The application team must manually remove the entitlement and update the CSV file accordingly.

3

Hi @Arun-Kumar

Thank you for your response. To clarify, it will not revoke anything. Is there a way to implement a hook that would allow us to modify the logic and remove entitlements at the account level during the policy violation revocation process? The challenge we face is that we will not be aggregating these applications on a daily basis.

Thanks.

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.