Hi, We are using SailPoint IdentityNow and SailPoint Professional services implemented the project for us. When we are offboarding users, email communication is sent only to birthright provisioned application owner and not all. How can we send communications to all applications owners of all applic…

Hi @jkalle , You can design your workflow with something like below: Step1: Trigger - Identity Attributes Changed . You can use filter (Advanced) as $.changes[?(@.attribute == "cloudLifecycleState")] Step 2: Compare String operator to check if the new cloudLifecycleState value is Inactive (or equ…

Hi @jkalle - You can look at using the OOB workflow " Leaver Workflow" and can extend it to fetch all the apps that are tagged to user and pull the owners to send an email. Regards, Adi

Hi @AdisharmaOz , Any pointers as tow how to fetch all the entitlements related to apps and send email to the application owners? Thanks JK

Hi @Abhinov7 , My requirement is simple. When user gets offboarded, we have to send emails to all the applications owners to de-provision them on the application side. As we are new to SailPoint finding it difficult to fetch the data and send using Workflows. Any pointers as tow how to fetch all the…

Hi @jkalle - As mentioned in my previous comment, try using the OOB workflow “Leave Workflow” - [image] you can make a copy of it and extend it by using the logic shared by Shailee. I’d suggest if you are new to workflows - then create it without the loop on a test user having 1 account and once…

Hi Shailee, This is Vijitha. Me and @jkalle are in same team. I tried following the steps you provided. In the Step 5, Inside the loop, I used “Get access” action. In the selection method, I used “By identity Id” and chose “Get entitlements” [image] In the Define variable section in the Loop, I…

Actually , We are trying to fetch the entitlement name and value from the specific source (Active directory) for the identity from the below screenshot and trying to send email to the app owner of that entitlement [image]

Hi @Vijitha , Refer this discussion - Workflow - Remove Entitlements from selected source - #2 by sharvari This might help. You may need to use a different path, such as $.getAccess.accessItems[*].value, which retrieves all entitlement values as an array. Also add the filter to fetch entitlements …

Hi @Vijitha , You are trying to call a variable ($.trigger.identity.id) inside the loop that is defined outside the loop, which is not allowed. You can define a Get Identity action outside the loop and then use the Get Identity variable as the $.loop.context to be called inside the Get Access opera…

Hi @Vijitha , I agree with Jevin, you will need to change the $.trigger.identity.id in the Get Access Identity filter step to use loop context. It should be like - $.loop.context.trigger.identity.id if you have defined the loop context as $

Regarding email communications to all the application owners during offboarding of an user

Identity Security Cloud (ISC) ISC Discussion and Questions

Abhinov7 (Abhinov Dhonthula) October 18, 2024, 2:07am 2

Hi,

Can you elaborate on requirement?

You need to send email when account is created in the application. Is it?

-Abhinov

Topic		Replies	Views
To stop email notification while leaver workflow trigger ISC Discussion and Questions identity-security-cloud	3	111	March 9, 2025
Access Profile Ownership Transfer Workflow as part of separation ISC Discussion and Questions identity-security-cloud	12	188	January 13, 2026
To send email notification if a owner of an entitlements get terminated or disabled IIQ Discussion and Questions identityiq	12	603	March 17, 2024
Removal of Entitlements added via API ISC Discussion and Questions apis , identity-security-cloud , entitlements	2	756	December 17, 2023
Email alerts from Deprovisioning - Guidance ISC Discussion and Questions identity-security-cloud , email-templates	4	132	October 19, 2024

Regarding email communications to all the application owners during offboarding of an user

Related topics