Provision completed workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Community,

Requirement: Enable the workflow, to send email to user whenever any AD accounts gets created(Multiple AD)
Can we trigger provision completed workflow trigger for multiple sources in a single workflow?
If yes ,

$.accountRequests[?(@.provisioningTarget == “xyz” || @.provisioningTarget == “xyz” @.provisioningTarget == “YYY” && @.accountOperation == “Create”)]

Get accounts is not giving the proper results.

image
image744×595 21.5 KB

image
image370×607 13.4 KB

Please help with any inputs how can i fix ?

2

Hi @nidhipriya ,
You are creating workflow to send and email notification when AD accounts gets created .
For above requirement ISC provides out of the box functionality to notify users when accounts get created on any source system .
https://documentation.sailpoint.com/saas/help/common/emails/et_newacctprovisioned.html
please check this link.
Thank you.

3

Hi @pavya - I knew this…
but requirements is something that we want send email using workflow as well.

4

Hi @nidhipriya , You can use the Compare String function to add the required application conditionally.
For example, use a Compare String to check if the source is AD—if true, then go for Send Mail. If false, nest another Compare String to check for the next source, and continue this pattern for the remaining applications.

I understand it’s more of a workaround, but this is the approach I typically follow.

5

Account details are specified incorrectly. Please try providing

$.trigger.accountRequests[?(@.accountOperation == "Create")].accountOperation
6

@sharvari - thankyou for the input ..
will try

7

Hi @hkhandale - Thankyou..I tried with compare string
but everytime compare string is taking false value..

9

Create is okay to have based on your use case description above.

10

@sharvari - Filter is not working , although it doesn’t show any error..
it is fetching all the accounts from AD

11

image
image382×508 8.44 KB

12

Try to Get the Accounts based on Account ID
Ex.

image
image433×736 10.6 KB

13

@sharvari - unfortunately it didn’t work as well

I tried “Identity” as account selection method.

image
image702×604 21.9 KB

  1. Provision completed - for filtering
    $.accountRequests[?(@.provisioningTarget == “XXXX” || @.provisioningTarget == “xyz” && @.accountOperation == “Create” && @.provisioningResult == “SUCCESS” )]

  2. Get accounts:

    image
    image361×408 6.38 KB

  3. define variable

image
image876×768 41.4 KB

Only Sometimes its picking values for email, Other values are not popping up.

  1. Body of the mail also not giving varaible values
    Hi ${name}

Account has been created for ${sourcename}
successfully.

Your account user name is : ${var}

14

When you use By Identity it will return you all accounts of the user. So account[0] won’t necessarily be the latest created account that you are looking for. You may probably want to search for that account using source id or name.

I am not sure about your email contents but it if its basic account data, that is available in the trigger itself, you won’t need to do a Get Accounts. If not the account selection should help you fetch the right account to get details. The filters I provided work, not sure why it’s not working on your end. Please try to refine your filter query and that should help you.

Hope this helps.