Is there a way to automate the routine refresh of identities? My organization is running into issues with roles not assigning and lifecycle states not being calculated in a timely manner due to lack of identity refreshes. My initial thought is to have a workflow run that kicks off identity refreshes…

Dominick, Before exploring ways to schedule your own processing I would first look into why the event based processing isn’t performing as expected. There is an API that takes a list of 250 identities that could be used for this but the API explicitly states the following: This operation should …

To overcome the limitations of the triggering 100 elements you can go for recursive loop [image] Recursive Workflows in IdentityNow Community Blog [header-image] IdentityNow Workflows provides a loop operator that allows a workflow to process many items in …

You can use this API to refresh identities in a specific Identity Profile {{baseUrl}}/beta/identity-profiles/:id/refresh-identities where :id is that of Identity Profile You can have a task scheduled to run a PS script that will send a POST request to above API for each of the Identity Profiles t…

Hey Ruben, I agree but I am not sure why the event based processing isn’t performing as expected. I’m not sure what else I can do to help debug SailPoint’s API. My guess is that it is not working due to the assignment criteria being an entitlement.

Dominick, Do you mean that the assignment criteria for a role is the presence of an entitlement? How is that entitlement provisioned or assigned? Are there any identity attributes that are calculated before the role assignment? To start to trouble shoot, I recommend starting with a single identit…

I know Workflows is convenient as it is OOTB. You can create some script (PowerShell or Python or as per your convenience) to trigger the API call to refresh Identities and schedule it in IQ Service server.

Hi Ruben, You are correct that for the roles I’m seeing issues with is the assignment criteria is an entitlement. I have seen roles get assigned as expected when the assignment criteria is an account or identity attribute value. The initial entitlement can be considered birthright and exists on the…

Routinely refresh identities

Identity Security Cloud (ISC) ISC Discussion and Questions

rajeshs (Rajesh Kumar) April 20, 2024, 4:08am 3

To overcome the limitations of the triggering 100 elements you can go for recursive loop

Topic		Replies	Views
POST /api/role/refresh Non-Public API Deprecations deprecated	14	1157	September 10, 2024
Identity refresh on entire tenant ISC Discussion and Questions identity-security-cloud	7	447	March 19, 2024
Run Refresh for Specified User(s) API ISC Discussion and Questions apis	2	600	July 19, 2023
Identity refresh is not performed regularly ISC Discussion and Questions identity-security-cloud , provisioning , identity-profiles , identities	5	278	December 15, 2024
Identity Process ISC Discussion and Questions aggregation , identity-security-cloud	8	140	September 14, 2025

Routinely refresh identities

Related topics