Provisioning IT role/ AD Groups in JDBC type application

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

*8.3

Hi Team,

We have an application where we are using JDBC type connector to perform aggregation. Provisioning to this application is handled using serviceNow application (No automated provisioning).
Here, we have additional requirement to provision IT Role (containing AD groups) to user after completion of app provisioning request (Snow ticket completion). Can you suggest possible solution to achieve this?

Thanks,
Reshma

2

Can you explain the use case bit in detail? what will be there in IT role? if the it role is containing the same group which you have requested through the service now then by default sailpoint will mark it as detected.

3

Hi Ankush,

IT role will contain AD groups.

Thanks,
Reshma

4

Hi Ankush,

Requirement is : Trigger AD groups provisioning after the application is provisioned to user.

How do we do this, in case of the applications where provisioning is not automated (e.g., applications which are configured with IdentityIQ for ServiceNow app to create ticket). Because in such cases before/after provisioning rule is not triggered.

Thanks,
Pallavi

5

Hi @Reshma_sonawane,

If the ask is just role provisioning after account provisioning, then have given a try to “Assignment rule” of business rule. Just assign this IT Role in Business Role and then use assignment rule.

Also, you may modify the workflow itself just to check for this application provisioning and once it is done you can trigger other provisioning.

Let me know if you need further insights.

Thanks

6

We were able to resolve by adding after provisioning rule to IdentityIQ for ServiceNow ServiceDesk application.

Thanks,
Pallavi

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.