Regarding the New Joiner Workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

We have one requirement for Joiner Process basically says when Identity created in SailPoint from trusted source, we need to perform some data quality checks if it get passed then we need to follow the other process if anything is missing then we need to send the email notification to HR people for fixing the values and set the LIfecycle state to incomplete. if it passes the data quality check then we need to classify them firstly into pre hire state ( which says todays date + 26 days more) after certain period of time if this gaps come to less than 25 days then all birthright provisioning needs to be apply over the identity and New Joiner email needs to be sent out to User and reporting manager.

Can anyone suggest what should be the best way to start on this process if anyone has worked on such implementations in the past.

Please note dedicated transform has already designed to calculate the lifecycle state to determine the hire state on the basis of start date.

Would seek your guidance in understanding how should we start to create the entire joiner process.

2

You can have different Cloud Lifecycle state based on start date (if its 26 days or more let it be prehire else active). Birthright assignments can be controlled based on the cloud life cycle state.
The requirement to send email to HR for missing attributes may require you to use custom workflows. You can set LCS to incomplete after checking if required attributes are missing. You can use a scheduled search trigger based workflow to launch it for all users with LCS incomplete and send notification to HR team.

3

Hi @LearningStar LCS and the Role assignment is the better option to implement the joiner workflow.

4

Hi,
Not knowing how you calculate the LCS - you’ve said a transform.
Assuming its a firstValid construction, Add in another {} that checks the source attributes that are required are both valid and present, and if not returns ‘incomplete’
Workflow on new identity created, checks LCS, and sends email to to HR team telling them that they are muppets and to do their job properly (paraphrasing there a bit)