I have a requirement and I wanted to check the feasibility of the requirement and how it can be done.
My client X currently has a manual process for provisioning access.
Manager submits a Service Now form mentioning the details what the subordinate wants. Rolename, laptopname, mobile,desk details etc.,
Now once the form is submitted. The service now team gets a tickets. Based on the ticket details the team goes to IIQ and select the role mentioned in the ticket. The other parts like laptop, mobile phone are manual task. IIQ doesn’t handle that.
So we are doing ServiceNow Service Catalog integration. Once we do that, we know the manager can get manage access page inside ServiceNow and they can submit the access for the subordinate here itself.
Now, i want to check instead of asking the manager to come to manage access page inside Snow do the role request here and go do the remaining request in Old form. I wanted to know if it is possible to read the contents inside tickets once submitted (old Snow form) by the manager and automatically provision the access via IIQ.
Note:The role they mention in the current form is a business role in IIQ. And the subordinate already exists as an Identity Cube in IIQ
new workflow to be created for serviceNow and that workflow will be triggered from ServiceNow using SailPoint API with required information , inside workflow you can define own steps to generate provisioning plan or call existing workflow (LCM provisioning,etc)
2.Create custom rest webservice in identityIQ ,covert JOSN object to workflow attributes and launch workflow .,its has more flexible for future enhancements
@BalajiChandrasekaran You might need to create a Business Rule or Flow Designer action on the catalog item/form submission in ServiceNow which can make an outbound API call to IIQ. While making the call, you can extract relevant fields and pass it in API call.
You also need to create a new endpoint in IIQ which will launch the workflow with the input parameters coming from the above call. In your workflow you might need to do Resolve Identity → Build Provisioning Plan (add role) →Pass it to LCM Provisioning workflow for provisioning or access reuqest generation or use Provisioner to execute directly.