Policy Violations - IIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

I have configured Policy Violation in Request Access Workflow.
If user is requesting detected role and user has already has that detected role then it should show Policy Violation error in Manage User Access form Only.
But when I’m requesting Multiple User then it creates the Violations workitem but it is not showing unlike when we request for Single User.
Anybody know how can we show Multiple Policy Violation in Manage User Access window only.

image
image1758×719 43.2 KB

2

Hi @sbhagat,

This is the default behavior of SailPoint as there are multiple violation type that can occur even for the same selection and so it does not show as pop on the screen. As soon as your request is submitted then workflow kicks in and a separate instance of it runs for all requests.

If you still want to show this on the screen, then you may have to switch to some custom request process. Let me know if further input is needed.

Thanks

1 Like
3

Can you help to build custom request process?

4

Anybody knows where should we make changes to get this done?

5

Do not use the out-of-the-box (OOTB) policy violation feature. Instead, create a custom form and integrate it into the “Manage Access” workflow. This approach allows you to check policy violations for each identity and display the violations only for the affected identities.

1 Like
6

Hi @sbhagat,

You may try to modify the “Identity Request Initialize” and under it “Identity Request Violation Review” subprocess which is responsible for this policy violation workitem generation.

Also if the above does not work you may use custom quicklink for the entire request submission process, but this process will be a huge effort for this development.

Let me know if further input is needed.

Thanks

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.