We have a requirement to remove all the entitlements provisioned to the user’s SAP Direct Account on termination. Ents should only be removed from the SAP account and not from any other source account i.e. AD etc. How can we achieve this using a workflow? The loop has a limitation of 100 items per loop, so we want to avoid the use of loop.
Hi @SandashA ,
Yes, using a BeforeProvisioningRule in IdentityNow can also effectively achieve the use case of removing all entitlements from a user’s SAP Direct account upon termination, without looping limitations.
I believe of using a BeforeProvisioningRule is that it gives you greater control over provisioning and entitlement management, and you can handle the removal of SAP entitlements dynamically before the actual provisioning process.
@SandashA you should be able to do this in workflow using a certification targeted at the entitlements for that source. the certification can be started and auto completed with a revoke for all matching entitlements.