"provisioning safeguard" mechanism request

Feedback Idea Discussions
1

Hello everyone,

We wish to implement a “provisioning safeguard” mechanism within the SailPoint IIQ solution to calculate the volume of provisioning requests over a given period prior to any provisioning action.

1/ If the calculated volume does not exceed a configurable threshold, provisioning proceeds.

2/ If the calculated volume exceeds the configurable threshold:

  • provisioning does not proceed

  • approval notifications are triggered: if the recipient approves the request, provisioning proceeds.

The requirement primarily concerns provisioning to Active Directory but could be extended to all target systems.
Have you implemented or encountered a mechanism of this type?

Thank you in advance for your feedback.
Best regards,

2

@cselvi Just noticing the thread. Seems you are talking about implementing a threshold evaluation before moving the item to provisioning.

Best way to do it is in the before provisioning rule because entry point could be different. Like LCM using Provision with Retries workflow while Refresh uses internal apis to trigger provisioning bypassing workflows.. but all the possible ways come to connector for provisioning, so you should introduce the necessary checks in before provisioning rule only.