Sending a notification when the AD entitlements are deleted in AD

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.2

Share all details related to your problem, including any error messages you may have received.

Hi Community,

Any idea on how to send notification to a particular DL whenever the AD entitlements are deleted on target system. There is a requirement in my project as in clients wants to have notifications whenever there is deleted entitlement in target.

Regards,
Charan

2

@charan18
Have Native change detection enabled on your application and create life cycle event based on the native change event

Within the life cycle event, check on the native change that happens in your case and within the workflow check for entitlement removals happened on target side for this app and send email accordingly

This should work

Note - Assumption here is you are expecting entitlement deletion happening at target and not from SailPoint , please correct or provide more details if this understating is not correct.

3

It’s important what is the source of deletion - is the group deleted from IIQ or outside?

4

The group will be deleted from outside

5

Hi @iamksatish the groups will be deleted at target (outside SailPoint).

6

Then NCD is best option.
I have already on this use case.

7

@pradeept can you please elaborate on how you have this implemented.

8

then above approach should work , enable native change detecting on application and have the corresponding checks and notification in workflow using life cycle event

1 Like
9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.