Provisioning Completed Trigger Filter

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello,

I am unable to trigger a provisioning completed workflow using the following filter logic

$.accountRequests[?(@.provisioningResult == ‘committed’ && @.provisioningTarget == ‘Target Name’ && @.accountOperation == ‘Modify’)].attributeRequests[?(@.operation == ‘Add’ && @.attributeValue =~ /^TEST_/)]

Filter works without below attributeRequests, but we need role attribute value filter starts with ‘TEST’

attributeRequests[?(@.operation == ‘Add’ && @.attributeValue =~ /^TEST_/)]

2

@skotian Can you eloborate the requirements or what are you trying to achieve?

Thanks.

3

we have a requirement where we need to send a email to particular group of team when someone request any role starting with ‘Test’ which got assigned for particular provisioning Target.

4

Hey Sandhya,

Try this filter logic instead, I have updated the logic for attributeRequests to give you the all the attribute values starting from ‘TEST’.

$.accountRequests[?(@.provisioningResult == 'SUCCESS' && @.provisioningTarget == 'Corp AD' && @.accountOperation == 'Modify')].attributeRequests[?(@.operation == 'Add' && @.attributeValue.toLowerCase().startsWith("test")  )]

You can modify the values as per your requirement.

Testing:
{E0FE3C85-ACAD-4593-BE44-EB89836C964D}

{9E93D115-DD63-4ED4-A216-6CD93B989430}
{9E93D115-DD63-4ED4-A216-6CD93B989430}948×561 24.9 KB

{B9A09E78-8209-4A31-B9D7-149001A2A7C6}
{B9A09E78-8209-4A31-B9D7-149001A2A7C6}948×559 11.5 KB

5

I did something wrong ?

image
image576×342 14.9 KB

6

Hey Sandhya,

My bad, it seems like startsWith and toLowerCase methods are not supported by SailPoint filtering. :point_down:

I modified it, now comparing using Regex. Validated this filter string as well. :+1:

$.accountRequests[?(@.provisioningResult == 'SUCCESS' && @.provisioningTarget == 'Corp AD' && @.accountOperation == 'Modify')].attributeRequests[?(@.operation == 'Add' && @.attributeValue =~ /test.*/i )]
7

same issue. WF didn’t triggered for role that start with Test.

8

Can you check if you are comparing with correct values, like

  • provisioningResult == ‘SUCCESS’
  • provisioningTarget == ‘Corp AD’
  • accountOperation == ‘Modify’
  • operation == ‘Add’

If you all these are correct, could you share the Provisioning Completed Trigger input you are getting in the workflow?

9

If you drop the json file it could be more efficient way to identify the issue and help to resolve it.

10

Here is the file
sailpoint.json (3.1 KB)