Source Account Created Workflow Trigger

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello Everyone,

I have been working on a workflow where an email is being sent to the manager and the employee when a new Active Directory account is created. I have been reviewing the logs from this workflow and noticed that this event is not just being triggered when a new account is created. It appears to be triggered when an account is being disabled or changed in some fashion.

With that said I was looking to improve my filtering to only trigger when create methods are being called. When I review the logs I am not seeing any for create. The reason I went with this event trigger was to only trigger when an account was created and then filter based on source. If the source does not match then end the workflow.

Below are the workflow I currently have set up. And I am trying to work through getting them to trigger correctly and to send the correct email with all needed information populated.

Workflow JSON:

{
	"name": "New Hire Email - Sent to Worker",
	"description": "This workflow is to send on boarding information to the worker who is onboarding.",
	"modified": "2024-09-09T11:33:05.908617824Z",
	"modifiedBy": {
		"type": "IDENTITY",
		"id": "REMOVED",
		"name": "REMOVED"
	},
	"definition": {
		"start": "Compare Strings",
		"steps": {
			"Compare Strings": {
				"choiceList": [
					{
						"comparator": "StringEquals",
						"nextStep": "Get Identity",
						"variableA.$": "$.trigger.sourceId",
						"variableB": "REMOVED"
					}
				],
				"defaultStep": "End Step - Success 4",
				"displayName": "",
				"type": "choice"
			},
			"End Step - Success": {
				"displayName": "",
				"type": "success"
			},
			"End Step - Success 1": {
				"displayName": "",
				"type": "success"
			},
			"End Step - Success 2": {
				"displayName": "",
				"type": "success"
			},
			"End Step - Success 3": {
				"displayName": "",
				"type": "success"
			},
			"End Step - Success 4": {
				"displayName": "",
				"type": "success"
			},
			"Get Identity": {
				"actionId": "sp:get-identity",
				"attributes": {
					"id.$": "$.trigger.identityId"
				},
				"displayName": "",
				"nextStep": "HTTP Request",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"jsonRequestBody.$": "",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"requestHeaders": {},
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "HTTP Request GET Workday Account",
				"nextStep": "Verify Data Type",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 1": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "HTTP Request GET AD Account",
				"nextStep": "Verify Data Type 1",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 2": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "",
				"nextStep": "Verify Data Type 2",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 3": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "HTTP GET SecZetta Assignment",
				"nextStep": "Verify Data Type 3",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 4": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"description": null,
				"displayName": "",
				"nextStep": "Verify Data Type 4",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 5": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "",
				"nextStep": "Verify Data Type 5",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 6": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "",
				"nextStep": "Verify Data Type 6",
				"type": "action",
				"versionNumber": 2
			},
			"HTTP Request 7": {
				"actionId": "sp:http",
				"attributes": {
					"authenticationType": "OAuth",
					"method": "get",
					"oAuthClientId": "REMOVED",
					"oAuthClientSecret": "REMOVED",
					"oAuthCredentialLocation": "oAuthInHeader",
					"oAuthScope": null,
					"oAuthTokenUrl": "https://REMOVED.api.identitynow.com/oauth/token",
					"requestContentType": "json",
					"url": "https://REMOVED.api.identitynow.com/v3/accounts",
					"urlParams": {
						"filters": "identityId eq \"{{$.trigger.identityId}}\" and sourceId eq \"REMOVED\""
					}
				},
				"displayName": "",
				"nextStep": "Verify Data Type 7",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<!DOCTYPE html>\n<p>\n<b>Welcome to REMOVED!</b><br></br>\nBelow is information you will need to access REMOVED systems and technology. \n</p>\n<p> \nYour credentials:<br></br>\n<li><u>${networkId}</u> This is your assigned user ID, also called network ID, that you will use when logging into an actual REMOVED issued device (laptop, workstation, computer, etc.).</li>\n<li><u>${upn}</u> After logging in to an REMOVED device, you will you this as your REMOVED Microsoft ID when logging into applications (Citrix, Microsoft 365 for email, Teams, Microsoft office suite, etc.).</li>\n</p>\n<p>\nNeed assistance?<br></br> \nFor questions or assistance please contact your leader or the Technology Service Center at: (866)-776-4357.\n</p>\n<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span></p>",
					"context": {
						"networkId.$": "$.hTTPRequest1.body[0].attributes.sAMAccountName",
						"upn.$": "$.hTTPRequest1.body[0].attributes.userPrincipalName"
					},
					"from": "[email protected]",
					"recipientEmailList.$": "$.hTTPRequest.body[0].attributes.['Home Email__C']",
					"subject": "Welcome to REMOVED!"
				},
				"displayName": "",
				"nextStep": "End Step - Success",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 1": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<!DOCTYPE html>\n<p>\n<b>Welcome to REMOVED!</b><br></br>\nBelow is information you will need to access REMOVED systems and technology. \n</p>\n<p> \nYour credentials:<br></br>\n<li><u>${networkId}</u> This is your assigned user ID, also called network ID, that you will use when logging into an actual REMOVED issued device (laptop, workstation, computer, etc.).</li>\n<li><u>${upn}</u> After logging in to an REMOVED device, you will you this as your REMOVED Microsoft ID when logging into applications (Citrix, Microsoft 365 for email, Teams, Microsoft office suite, etc.).</li>\n</p>\n<p>\nNeed assistance?<br></br> \nFor questions or assistance please contact your leader or the Technology Service Center at: (866)-776-4357.\n</p>\n<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span></p>",
					"context": {
						"networkId.$": "$.hTTPRequest2.body[0].attributes.sAMAccountName",
						"upn.$": "$.hTTPRequest2.body[0].attributes.userPrincipalName"
					},
					"from": "[email protected]",
					"recipientEmailList.$": "$.hTTPRequest.body[0].attributes.['Home Email__C']",
					"subject": "Welcome to REMOVED!"
				},
				"displayName": "",
				"nextStep": "End Step - Success 2",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 2": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<!DOCTYPE html>\n<p>\n<b>Welcome to REMOVED!</b><br></br>\nBelow is information you will need to access REMOVED systems and technology. \n</p>\n<p> \nYour credentials:<br></br>\n<li><u>${networkId}</u> This is your assigned user ID, also called network ID, that you will use when logging into an actual REMOVED issued device (laptop, workstation, computer, etc.).</li>\n<li><u>${upn}</u> After logging in to an REMOVED device, you will you this as your REMOVED Microsoft ID when logging into applications (Citrix, Microsoft 365 for email, Teams, Microsoft office suite, etc.).</li>\n</p>\n<p>\nNeed assistance?<br></br> \nFor questions or assistance please contact your leader or the Technology Service Center at: (866)-776-4357.\n</p>\n<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span></p>",
					"context": {
						"networkId.$": "$.hTTPRequest5.body[0].attributes.sAMAccountName",
						"upn.$": "$.hTTPRequest5.body[0].attributes.userPrincipalName"
					},
					"from": "[email protected]",
					"recipientEmailList.$": "$.hTTPRequest4.body[0].attributes.['personal_email']",
					"subject": "Welcome to REMOVED!"
				},
				"description": "$.hTTPRequest4.body[0].attributes.personal_email",
				"displayName": "",
				"nextStep": "End Step - Success 1",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 3": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<!DOCTYPE html>\n<p>\n<b>Welcome to REMOVED!</b><br></br>\nBelow is information you will need to access REMOVED systems and technology. \n</p>\n<p> \nYour credentials:<br></br>\n<li><u>${networkId}</u> This is your assigned user ID, also called network ID, that you will use when logging into an actual REMOVED issued device (laptop, workstation, computer, etc.).</li>\n<li><u>${upn}</u> After logging in to an REMOVED device, you will you this as your REMOVED Microsoft ID when logging into applications (Citrix, Microsoft 365 for email, Teams, Microsoft office suite, etc.).</li>\n</p>\n<p>\nNeed assistance?<br></br> \nFor questions or assistance please contact your leader or the Technology Service Center at: (866)-776-4357.\n</p>\n<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span></p>",
					"context": {
						"networkId.$": "$.hTTPRequest7.body[0].attributes.sAMAccountName",
						"upn.$": "$.hTTPRequest7.body[0].attributes.userPrincipalName"
					},
					"from": "[email protected]",
					"recipientEmailList.$": "$.hTTPRequest3.body[0].attributes.['personal_email']",
					"subject": "Welcome to REMOVED!"
				},
				"description": "$.hTTPRequest4.body[0].attributes.personal_email",
				"displayName": "",
				"nextStep": "End Step - Success 3",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 4": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<!DOCTYPE html>\n<p>\n<b>Welcome to REMOVED!</b><br></br>\nBelow is information you will need to access REMOVED systems and technology. \n</p>\n<p> \nYour credentials:<br></br>\n<li><u>${networkId}</u> This is your assigned user ID, also called network ID, that you will use when logging into an actual REMOVED issued device (laptop, workstation, computer, etc.).</li>\n<li><u>${upn}</u> After logging in to an REMOVED device, you will you this as your REMOVED Microsoft ID when logging into applications (Citrix, Microsoft 365 for email, Teams, Microsoft office suite, etc.).</li>\n</p>\n<p>\nNeed assistance?<br></br> \nFor questions or assistance please contact your leader or the Technology Service Center at: (866)-776-4357.\n</p>\n<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span></p>",
					"context": {
						"networkId.$": "$.hTTPRequest6.body[0].attributes.sAMAccountName",
						"upn.$": "$.hTTPRequest6.body[0].attributes.userPrincipalName"
					},
					"from": "[email protected]",
					"recipientEmailList.$": "$.hTTPRequest3.body[0].attributes.['personal_email']",
					"replyTo": null,
					"subject": "Welcome to REMOVED!"
				},
				"description": "$.hTTPRequest4.body[0].attributes.personal_email",
				"displayName": "",
				"nextStep": "End Step - Success 3",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 6": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "No UPN Populated on Account",
					"context": {},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"subject": "No Ad Account found for $.trigger.identityName"
				},
				"displayName": "",
				"nextStep": "End Step - Success 2",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 7": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "SecZetta Account found but no UPN Found.",
					"context": {},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"subject": "No Ad Account found for $.trigger.identityName"
				},
				"displayName": "",
				"nextStep": "End Step - Success 1",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 8": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "No Workday Account and No SecZetta Account did not try AD.",
					"context": {},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"subject": "No Ad Account found for $.trigger.identityName"
				},
				"description": null,
				"displayName": "",
				"nextStep": "End Step - Success 1",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 9": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "SecZetta account found but no upn has been populated",
					"context": {},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"subject": "No Ad Account found for $.trigger.identityName"
				},
				"description": null,
				"displayName": "",
				"nextStep": "End Step - Success 3",
				"type": "action",
				"versionNumber": 2
			},
			"Verify Data Type": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "HTTP Request 3",
						"variableA.$": "$.hTTPRequest.body[0].attributes.['Home Email__C']"
					}
				],
				"defaultStep": "HTTP Request 1",
				"description": null,
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 1": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Wait",
						"variableA.$": "$.hTTPRequest1.body[0].attributes.userPrincipalName"
					}
				],
				"defaultStep": "Send Email",
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 2": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 6",
						"variableA.$": "$.hTTPRequest2.body[0].attributes.userPrincipalName"
					}
				],
				"defaultStep": "Send Email 1",
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 3": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Wait 1",
						"variableA.$": "$.hTTPRequest3.body[0].attributes.['personal_email']"
					}
				],
				"defaultStep": "HTTP Request 6",
				"description": null,
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 4": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 8",
						"variableA.$": "$.hTTPRequest4.body[0].attributes.['personal_email']"
					}
				],
				"defaultStep": "HTTP Request 5",
				"description": null,
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 5": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 7",
						"variableA.$": "$.hTTPRequest5.body[0].attributes.userPrincipalName"
					}
				],
				"defaultStep": "Send Email 2",
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 6": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Wait 2",
						"variableA.$": "$.hTTPRequest6.body[0].attributes.userPrincipalName"
					}
				],
				"defaultStep": "Send Email 4",
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 7": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 9",
						"variableA.$": "$.hTTPRequest6.body[0].attributes.userPrincipalName"
					}
				],
				"defaultStep": "Send Email 3",
				"displayName": "",
				"type": "choice"
			},
			"Wait": {
				"actionId": "sp:sleep",
				"attributes": {
					"duration": "30m",
					"type": "waitFor"
				},
				"displayName": "",
				"nextStep": "HTTP Request 2",
				"type": "action",
				"versionNumber": 1
			},
			"Wait 1": {
				"actionId": "sp:sleep",
				"attributes": {
					"duration": "4h",
					"type": "waitFor"
				},
				"displayName": "",
				"nextStep": "HTTP Request 4",
				"type": "action",
				"versionNumber": 1
			},
			"Wait 2": {
				"actionId": "sp:sleep",
				"attributes": {
					"duration": "30m",
					"type": "waitFor"
				},
				"displayName": "",
				"nextStep": "HTTP Request 7",
				"type": "action",
				"versionNumber": 1
			}
		}
	},
	"creator": {
		"type": "IDENTITY",
		"id": "REMOVED",
		"name": "REMOVED"
	},
	"trigger": {
		"type": "EVENT",
		"attributes": {
			"id": "idn:source-account-created"
		}
	}
}

{
	"name": "New Hire Email V2",
	"description": "New Hire Email V2",
	"modified": "2024-09-06T14:52:45.88660474Z",
	"modifiedBy": {
		"type": "IDENTITY",
		"id": "REMOVED",
		"name": "REMOVED"
	},
	"definition": {
		"start": "Compare Strings",
		"steps": {
			"Compare Strings": {
				"choiceList": [
					{
						"comparator": "StringEquals",
						"nextStep": "Get Identity",
						"variableA.$": "$.trigger.sourceId",
						"variableB": "REMOVED"
					}
				],
				"defaultStep": "End Step - Success 1",
				"displayName": "",
				"type": "choice"
			},
			"End Step - Success": {
				"displayName": "",
				"type": "success"
			},
			"End Step - Success 1": {
				"displayName": "",
				"type": "success"
			},
			"Get Identity": {
				"actionId": "sp:get-identity",
				"attributes": {
					"id.$": "$.trigger.identityId"
				},
				"displayName": "",
				"nextStep": "Verify Data Type",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<html>\n<body lang=EN-US link='#0563C1' vlink='#954F72' style='word-wrap:break-word'>\n\t<div class=WordSection1>\n\t\t<table border=0 cellspacing=0 cellpadding=0 style='margin-left:-4.5pt;border-collapse:collapse'>\n\t\t\t<tr style='height:23.4pt'>\n\t\t\t\t<td width=845 style='width:634.05pt;background:#001F5F;padding:.05in .05in .05in .05in;height:23.4pt'>\n\t\t\t\t\t<p style='color:white'>\n\t\t\t\t\t\tACTION REQUIRED\n\t\t\t\t\t\tNew Hire Provisioning Next Steps</span><span style='font-size:16.0pt'>\n\n\t\t\t\t\t\t</span>\n\t\t\t\t\t</p>\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t\tDear SSM Health Leader or delegate:\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>\n\t\t\t\tA new team member is joining your team and is ready to have the required access and IT equipment\n\t\t\t\trequested.\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>The\n\t\t\t\tprovisioning process must be initiated within <b><u><span\n\t\t\t\t\tstyle='font-size:12.0pt;line-height:200%;color:#0070C0'>2 weeks prior</span></u></b>  to the employee's start date.\n\n\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>Employees Name:\n\t\t\t\t<span >${displayName}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Start Date:\n\t\t\t\t<span>${startDate}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Assigned user ID:\n\t\t\t\t<span>${uid}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>SSMH Microsoft ID:\n\t\t\t\t<span>${upn}</span></span><br></br>\n\t\t</p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><b><u><span style='font-size:12.0pt;color:black'>Please,\n\t\t\t\t\t\treach out to your new hire to confirm:</span></u></b></p>\n\t\t<ul style='margin-top:0in' type=disc>\n\t\t\t<li style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Details of the position</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Dress code\n\t\t\t\t\trequirements</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Their work\n\t\t\t\t\tschedule (including where and when they are expected to be after\n\t\t\t\t\tthe first day New Employee Welcome is complete).\n\n\t\t\t\t</span></li>\n\t\t</ul>\n\t\t<table width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t<tr width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t\t<td width=570 valign=top style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;padding:0in 5.4pt 0in 5.4pt;height:.3in; font-size:16.0pt;color:white'>\n\t\t\t\tCurrent access automatically granted:\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<table width=570>\n\t\t\t<tr >\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse; border-style: soild;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Active Directory</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Properly connects users to the SSMH network</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>ServiceNow</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to submit an e-Help ticket, only.</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse'>MS Authenticator</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft Authenticator & Password Self-Service                (enrollment will be required by user) </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft 0365</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Email / OneDrive / Teams\n\t\t(for all SSMH employees)<br></br>\n        Please Note - ServiceNow request is required for Contingent Workers to be provisioned an email account)\n\t\t</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix Icons</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix icons including Epic User Prod/Playground/Training, LMS and SSMH Intranet. <li>Request for <a href='https://REMOVED.sharepoint.com/sites/InformationSecurity-SSM/SitePages/IAM%20Provisioning/Epic-Onboarding-Changes-Homepage.aspx?OR=Teams-HL&CT=1717607688227'>Epic access</a> will need to be submitted.</li>  </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>SSMH Intranet</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to access SSMH Intranet</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>LMS</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Learning/required courses sent to all SSMH Employees and Contingent Workers</td>\n\t\t\t</tr>\n\t\t</table>\n        \n<p class=MsoNormal><span style='font-size:18.0pt;color:#002060'>Please visit the <a\n\t\t\t\t\thref=\"https://REMOVED.service-now.com/sp\">Service Portal</a> to request additional system access and IT equipment.\n\t\t\t\t<o:p></o:p></span>\n                <ul><li>\n                For entity 0033 (System Office) and 0009 (IHT) team members, click <a href='https://REMOVED.service-now.com/sp?id=sc_category&sys_id=bda16d141b2186109cc7c99f1d4bcb46&catalog_id=e0d08b13c3330100c8b837659bba8fb4&spa=1'>here</a>.\n                </li></ul></p>\n\t\t<p><span style='color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:black'>Please direct any questions to the <a\n\t\t\t\t\thref='https://REMOVED.sharepoint.com/sites/TechnologyServiceCenterSupport/SitePages/Contact-the-TSC.aspx'>Technology\n\t\t\t\t\tService Center (TSC)</a> via <a\n\t\t\t\t\thref='https://REMOVED.service-now.com/sp?id=report_an_issue&amp;sys_id='><span\n\t\t\t\t\t\tstyle='color:#0563C1'>eHelp</span></a> or calling 866-SSM-Help (866-776-4357)</span>\n\t\t</p>\n\n\t\t<p><span style='color:#002060'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span>\n\n\t\t</p>\n\t\t<p>\n\n\n\t\t</p>\n\t</div>\n</body>\n\n</html>",
					"context": {
						"displayName.$": "$.getIdentity.attributes.displayName",
						"employeeNumber.$": "$.getIdentity.attributes.identificationNumber",
						"managerName.$": "$.getIdentity.attributes.firstname",
						"startDate.$": "$.getIdentity.attributes.startDate",
						"uid.$": "$.getIdentity.attributes.uid",
						"upn.$": "$.getIdentity.attributes.upn"
					},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"replyTo": "[email protected]",
					"subject": "New Hire ${displayName} - Next Steps Needed"
				},
				"description": null,
				"displayName": "",
				"nextStep": "End Step - Success",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 1": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<html>\n<body lang=EN-US link='#0563C1' vlink='#954F72' style='word-wrap:break-word'>\n\t<div class=WordSection1>\n\t\t<table border=0 cellspacing=0 cellpadding=0 style='margin-left:-4.5pt;border-collapse:collapse'>\n\t\t\t<tr style='height:23.4pt'>\n\t\t\t\t<td width=845 style='width:634.05pt;background:#001F5F;padding:.05in .05in .05in .05in;height:23.4pt'>\n\t\t\t\t\t<p style='color:white'>\n\t\t\t\t\t\tACTION REQUIRED\n\t\t\t\t\t\tNew Hire Provisioning Next Steps</span><span style='font-size:16.0pt'>\n\n\t\t\t\t\t\t</span>\n\t\t\t\t\t</p>\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t\tDear SSM Health Leader or delegate:\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>\n\t\t\t\tA new team member is joining your team and is ready to have the required access and IT equipment\n\t\t\t\trequested.\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>The\n\t\t\t\tprovisioning process must be initiated within <b><u><span\n\t\t\t\t\tstyle='font-size:12.0pt;line-height:200%;color:#0070C0'>2 weeks prior</span></u></b>  to the employee's start date.\n\n\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>Employees Name:\n\t\t\t\t<span >${displayName}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Start Date:\n\t\t\t\t<span>${startDate}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Assigned user ID:\n\t\t\t\t<span>${uid}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>SSMH Microsoft ID:\n\t\t\t\t<span>${upn}</span></span><br></br>\n\t\t</p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><b><u><span style='font-size:12.0pt;color:black'>Please,\n\t\t\t\t\t\treach out to your new hire to confirm:</span></u></b></p>\n\t\t<ul style='margin-top:0in' type=disc>\n\t\t\t<li style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Details of the position</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Dress code\n\t\t\t\t\trequirements</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Their work\n\t\t\t\t\tschedule (including where and when they are expected to be after\n\t\t\t\t\tthe first day New Employee Welcome is complete).\n\n\t\t\t\t</span></li>\n\t\t</ul>\n\t\t<table width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t<tr width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t\t<td width=570 valign=top style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;padding:0in 5.4pt 0in 5.4pt;height:.3in; font-size:16.0pt;color:white'>\n\t\t\t\tCurrent access automatically granted:\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<table width=570>\n\t\t\t<tr >\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse; border-style: soild;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Active Directory</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Properly connects users to the SSMH network</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>ServiceNow</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to submit an e-Help ticket, only.</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse'>MS Authenticator</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft Authenticator & Password Self-Service                (enrollment will be required by user) </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft 0365</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Email / OneDrive / Teams\n\t\t(for all SSMH employees)<br></br>\n        Please Note - ServiceNow request is required for Contingent Workers to be provisioned an email account)\n\t\t</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix Icons</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix icons including Epic User Prod/Playground/Training, LMS and SSMH Intranet. <li>Request for <a href='https://REMOVED.sharepoint.com/sites/InformationSecurity-SSM/SitePages/IAM%20Provisioning/Epic-Onboarding-Changes-Homepage.aspx?OR=Teams-HL&CT=1717607688227'>Epic access</a> will need to be submitted.</li>  </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>SSMH Intranet</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to access SSMH Intranet</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>LMS</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Learning/required courses sent to all SSMH Employees and Contingent Workers</td>\n\t\t\t</tr>\n\t\t</table>\n        \n<p class=MsoNormal><span style='font-size:18.0pt;color:#002060'>Please visit the <a\n\t\t\t\t\thref=\"https://REMOVED.service-now.com/sp\">Service Portal</a> to request additional system access and IT equipment.\n\t\t\t\t<o:p></o:p></span>\n                <ul><li>\n                For entity 0033 (System Office) and 0009 (IHT) team members, click <a href='https://REMOVED.service-now.com/sp?id=sc_category&sys_id=bda16d141b2186109cc7c99f1d4bcb46&catalog_id=e0d08b13c3330100c8b837659bba8fb4&spa=1'>here</a>.\n                </li></ul></p>\n\t\t<p><span style='color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:black'>Please direct any questions to the <a\n\t\t\t\t\thref='https://REMOVED.sharepoint.com/sites/TechnologyServiceCenterSupport/SitePages/Contact-the-TSC.aspx'>Technology\n\t\t\t\t\tService Center (TSC)</a> via <a\n\t\t\t\t\thref='https://REMOVED.service-now.com/sp?id=report_an_issue&amp;sys_id='><span\n\t\t\t\t\t\tstyle='color:#0563C1'>eHelp</span></a> or calling 866-SSM-Help (866-776-4357)</span>\n\t\t</p>\n\n\t\t<p><span style='color:#002060'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span>\n\n\t\t</p>\n\t\t<p>\n\n\n\t\t</p>\n\t</div>\n</body>\n\n</html>",
					"context": {
						"displayName.$": "$.getIdentity.attributes.displayName",
						"employeeNumber.$": "$.getIdentity.attributes.identificationNumber",
						"managerName.$": "$.getIdentity.attributes.firstname",
						"startDate.$": "$.getIdentity.attributes.startDate",
						"uid.$": "$.getIdentity.attributes.uid",
						"upn.$": "$.getIdentity.attributes.upn"
					},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"replyTo": "[email protected]",
					"subject": "New Hire ${displayName} Next Steps Needed - NO MANAGER"
				},
				"displayName": "",
				"nextStep": "End Step - Success",
				"type": "action",
				"versionNumber": 2
			},
			"Send Email 2": {
				"actionId": "sp:send-email",
				"attributes": {
					"body": "<html>\n<body lang=EN-US link='#0563C1' vlink='#954F72' style='word-wrap:break-word'>\n\t<div class=WordSection1>\n\t\t<table border=0 cellspacing=0 cellpadding=0 style='margin-left:-4.5pt;border-collapse:collapse'>\n\t\t\t<tr style='height:23.4pt'>\n\t\t\t\t<td width=845 style='width:634.05pt;background:#001F5F;padding:.05in .05in .05in .05in;height:23.4pt'>\n\t\t\t\t\t<p style='color:white'>\n\t\t\t\t\t\tACTION REQUIRED\n\t\t\t\t\t\tNew Hire Provisioning Next Steps</span><span style='font-size:16.0pt'>\n\n\t\t\t\t\t\t</span>\n\t\t\t\t\t</p>\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t\tDear SSM Health Leader or delegate:\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>\n\t\t\t\tA new team member is joining your team and is ready to have the required access and IT equipment\n\t\t\t\trequested.\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>The\n\t\t\t\tprovisioning process must be initiated within <b><u><span\n\t\t\t\t\tstyle='font-size:12.0pt;line-height:200%;color:#0070C0'>2 weeks prior</span></u></b>  to the employee's start date.\n\n\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>Employees Name:\n\t\t\t\t<span >${displayName}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Start Date:\n\t\t\t\t<span>${startDate}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Assigned user ID:\n\t\t\t\t<span>${uid}</span></span><br></br>\n\t\t</p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><b><u><span style='font-size:12.0pt;color:black'>Please,\n\t\t\t\t\t\treach out to your new hire to confirm:</span></u></b></p>\n\t\t<ul style='margin-top:0in' type=disc>\n\t\t\t<li style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Details of the position</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Dress code\n\t\t\t\t\trequirements</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Their work\n\t\t\t\t\tschedule (including where and when they are expected to be after\n\t\t\t\t\tthe first day New Employee Welcome is complete).\n\n\t\t\t\t</span></li>\n\t\t</ul>\n\t\t<table width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t<tr width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t\t<td width=570 valign=top style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;padding:0in 5.4pt 0in 5.4pt;height:.3in; font-size:16.0pt;color:white'>\n\t\t\t\tCurrent access automatically granted:\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<table width=570>\n\t\t\t<tr >\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse; border-style: soild;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Active Directory</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Properly connects users to the SSMH network</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>ServiceNow</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to submit an e-Help ticket, only.</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse'>MS Authenticator</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft Authenticator & Password Self-Service                (enrollment will be required by user) </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft 0365</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Email / OneDrive / Teams\n\t\t(for all SSMH employees)<br></br>\n        Please Note - ServiceNow request is required for Contingent Workers to be provisioned an email account)\n\t\t</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix Icons</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix icons including Epic User Prod/Playground/Training, LMS and SSMH Intranet. <li>Request for <a href='https://REMOVED.sharepoint.com/sites/InformationSecurity-SSM/SitePages/IAM%20Provisioning/Epic-Onboarding-Changes-Homepage.aspx?OR=Teams-HL&CT=1717607688227'>Epic access</a> will need to be submitted.</li>  </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>SSMH Intranet</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to access SSMH Intranet</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>LMS</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Learning/required courses sent to all SSMH Employees and Contingent Workers</td>\n\t\t\t</tr>\n\t\t</table>\n        \n<p class=MsoNormal><span style='font-size:18.0pt;color:#002060'>Please visit the <a\n\t\t\t\t\thref=\"https://REMOVED.service-now.com/sp\">Service Portal</a> to request additional system access and IT equipment.\n\t\t\t\t<o:p></o:p></span>\n                <ul><li>\n                For entity 0033 (System Office) and 0009 (IHT) team members, click <a href='https://REMOVED.service-now.com/sp?id=sc_category&sys_id=bda16d141b2186109cc7c99f1d4bcb46&catalog_id=e0d08b13c3330100c8b837659bba8fb4&spa=1'>here</a>.\n                </li></ul></p>\n\t\t<p><span style='color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:black'>Please direct any questions to the <a\n\t\t\t\t\thref='https://REMOVED.sharepoint.com/sites/TechnologyServiceCenterSupport/SitePages/Contact-the-TSC.aspx'>Technology\n\t\t\t\t\tService Center (TSC)</a> via <a\n\t\t\t\t\thref='https://REMOVED.service-now.com/sp?id=report_an_issue&amp;sys_id='><span\n\t\t\t\t\t\tstyle='color:#0563C1'>eHelp</span></a> or calling 866-SSM-Help (866-776-4357)</span>\n\t\t</p>\n\n\t\t<p><span style='color:#002060'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span>\n\n\t\t</p>\n\t\t<p>\n\n\n\t\t</p>\n\t</div>\n</body>\n\n</html>",
					"context": {
						"displayName.$": "$.getIdentity.attributes.displayName",
						"employeeNumber.$": "$.getIdentity.attributes.identificationNumber",
						"managerName.$": "$.getIdentity.attributes.firstname",
						"startDate.$": "$.getIdentity.attributes.startDate",
						"uid.$": "$.getIdentity.attributes.uid",
						"upn.$": "$.getIdentity.attributes.upn"
					},
					"from": "[email protected]",
					"recipientEmailList": [
						"[email protected]"
					],
					"replyTo": "[email protected]",
					"subject": "New Hire ${displayName} - Next Steps Needed"
				},
				"description": null,
				"displayName": "",
				"nextStep": "End Step - Success",
				"type": "action",
				"versionNumber": 2
			},
			"Verify Data Type": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 1",
						"variableA.$": "$.getIdentity.managerRef.id"
					}
				],
				"defaultStep": "Verify Data Type 1",
				"displayName": "",
				"type": "choice"
			},
			"Verify Data Type 1": {
				"choiceList": [
					{
						"comparator": "IsNull",
						"nextStep": "Send Email 2",
						"variableA.$": "$.getIdentity.attributes.upn"
					}
				],
				"defaultStep": "Send Email",
				"displayName": "",
				"type": "choice"
			}
		}
	},
	"creator": {
		"type": "IDENTITY",
		"id": "REMOVED",
		"name": "REMOVED"
	},
	"trigger": {
		"type": "EVENT",
		"attributes": {
			"id": "idn:source-account-created"
		}
	}
}

Example Email being Sent:

image
image1043×370 12.7 KB

image
image1030×947 52.4 KB

Example Logs:

{
    "input": {
        "_meta": {
            "invocationId": "REMOVED",
            "subscriptionId": "REMOVED",
            "triggerType": "FIRE_AND_FORGET"
        },
        "attributes": {
            "IIQDisabled": true,
            "NetBIOSName": null,
            "accountFlags": [
                "Normal User Account",
                "User Account is Disabled"
            ],
            "cn": "kvang05",
            "distinguishedName": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "idNowDescription": "REMOVED",
            "memberOf": [
                "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC"
            ],
            "msDS-PrincipalName": "LAB3CHILD\\kvang05",
            "msNPAllowDialin": "Not Set",
            "newSamAccountName": "kvang05",
            "objectClass": [
                "top",
                "person",
                "organizationalPerson",
                "user"
            ],
            "objectSid": "REMOVED",
            "objectType": "user",
            "objectguid": "{REMOVED}",
            "passwordLastSet": 1707797709447,
            "primaryGroupDN": "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "primaryGroupID": "513",
            "pwdLastSet": "REMOVED",
            "sAMAccountName": "kvang05"
        },
        "id": "REMOVED",
        "identityId": "REMOVED",
        "identityName": "REMOVED",
        "nativeIdentifier": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
        "sourceId": "REMOVED",
        "sourceName": "Active Directory [source]",
        "uuid": "{REMOVED}"
    }
}
{
    "displayName": "Compare Strings",
    "input": {
        "compareStrings": {
            "ChoiceList": [
                {
                    "Comparator": "StringEquals",
                    "NextStep": "Get Identity",
                    "VariableA.$": "$.trigger.sourceId",
                    "VariableB": "REMOVED"
                }
            ],
            "DefaultStep": "End Step - Success 1",
            "Name": "Compare Strings",
            "SelectInput": "$",
            "SelectOutput": "$",
            "SelectResult": "$",
            "Type": "choice"
        },
        "trigger": {
            "_meta": {
                "invocationId": "REMOVED",
                "subscriptionId": "REMOVED",
                "triggerType": "FIRE_AND_FORGET"
            },
            "attributes": {
                "IIQDisabled": true,
                "NetBIOSName": null,
                "accountFlags": [
                    "Normal User Account",
                    "User Account is Disabled"
                ],
                "cn": "kvang05",
                "distinguishedName": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "idNowDescription": "REMOVED",
                "memberOf": [
                    "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC"
                ],
                "msDS-PrincipalName": "LAB3CHILD\\kvang05",
                "msNPAllowDialin": "Not Set",
                "newSamAccountName": "kvang05",
                "objectClass": [
                    "top",
                    "person",
                    "organizationalPerson",
                    "user"
                ],
                "objectSid": "REMOVED",
                "objectType": "user",
                "objectguid": "{REMOVED}",
                "passwordLastSet": 1707797709447,
                "primaryGroupDN": "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "primaryGroupID": "513",
                "pwdLastSet": "REMOVED",
                "sAMAccountName": "kvang05"
            },
            "id": "REMOVED",
            "identityId": "REMOVED",
            "identityName": "REMOVED",
            "nativeIdentifier": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "sourceId": "REMOVED",
            "sourceName": "Active Directory [source]",
            "uuid": "{REMOVED}"
        }
    },
    "stepName": "compareStrings",
    "task": "sp:internal:operator"
}
{
    "attempts": 1,
    "displayName": "Compare Strings",
    "stepName": "compareStrings",
    "task": "sp:internal:operator"
}
{
    "displayName": "Compare Strings",
    "result": {
        "next": "Get Identity",
        "output": true
    },
    "stepName": "compareStrings",
    "task": "sp:internal:operator"
}
{
    "displayName": "Get Identity",
    "input": {
        "id": "REMOVED",
        "method": "GET",
        "path": "v3/identities/REMOVED",
        "service": "mice"
    },
    "stepName": "getIdentity",
    "task": "sp:get-identity"
}
{
    "attempts": 1,
    "displayName": "Get Identity",
    "stepName": "getIdentity",
    "task": "sp:get-identity"
}
{
    "displayName": "Get Identity",
    "result": {
        "alias": "REMOVED",
        "attributes": {
            "adSamaccountName": "KVANG05",
            "addisplayname": "Van Gels, Kimberly",
            "adfirstname": "Kimberly",
            "adlastname": "Van Gels",
            "categoryReportGrouper2": "Primary",
            "cloudAuthoritativeSource": "2095e9f117664945ab33d202ca575bfa",
            "cloudLifecycleState": "inactive",
            "cloudStatus": "UNREGISTERED",
            "company": "REMOVED",
            "country": "USA",
            "disabledOu": "REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "displayName": "Van Gels, Kimberly",
            "email": "[email protected]",
            "empLinkedproviderid": "REMOVED",
            "employeeType": "Employee",
            "endDate": "2024-09-05",
            "epicDefaultlinkedtemplateid": "REMOVED",
            "epicNotes": "10/24/2022 - This account was automated by Epic Security.\n09/07/2024 - Automated termination by SailPoint",
            "epicTermDate": "09/06/2024",
            "firstname": "Kimberly",
            "identificationNumber": "REMOVED",
            "identityState": "INACTIVE_LONG_TERM",
            "internalCloudStatus": "UNREGISTERED",
            "jobCode": "JC101372",
            "lastDayWorked": "2024-09-05",
            "lastSyncDate": "REMOVED",
            "lastname": "Van Gels",
            "licenseStatus": "unlicensed",
            "linkedProviderId": "REMOVED",
            "location": "REMOVED",
            "locationId": "0204",
            "managerId": "No Saba Account",
            "middleInitial": "A",
            "middleName": "A.",
            "moverTrigger": "null:null:null:null:null",
            "newRbpgPositionCode": "||JC101372",
            "positionCode": "P226183",
            "preferredFirstname": "Kimberly",
            "preferredLastname": "Van Gels",
            "preferredName": "Kimberly Van Gels",
            "rbpgOffsetDays": "1",
            "rbpgPositionCode": "null|null|JC101372",
            "rbpgTrigger": null,
            "sabaLocation": "No Saba Location",
            "seczettaCorrelationKey": "REMOVED",
            "serProviderid": "REMOVED",
            "servicenowREMOVEDGrantTableCorrelation": "REMOVED",
            "snowAccount": "Provision Account on 2023-12-07T08:21:47Z",
            "standardOu": "OU=Standard,OU=Users,REMOVED,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "startDate": "2022-10-24",
            "terminationReason": "Voluntary",
            "uid": "kvang05",
            "updatedSeczettaManager": "REMOVED",
            "updatedseczettaemailaddress": null,
            "userSubType": "Employee",
            "workdayCorrelationKey": "REMOVED"
        },
        "created": "2023-08-15T19:08:18.656Z",
        "emailAddress": "[email protected]",
        "id": "REMOVED",
        "identityStatus": "UNREGISTERED",
        "isManager": false,
        "lastRefresh": "2024-09-09T10:07:57.281Z",
        "lifecycleState": {
            "manuallyUpdated": false,
            "stateName": "inactive"
        },
        "managerRef": null,
        "modified": "2024-09-09T10:07:57.340Z",
        "name": "Van Gels, Kimberly",
        "processingState": null
    },
    "stepName": "getIdentity",
    "task": "sp:get-identity"
}
{
    "displayName": "Verify Data Type",
    "input": {
        "compareStrings": {
            "ChoiceList": [
                {
                    "Comparator": "StringEquals",
                    "NextStep": "Get Identity",
                    "VariableA.$": "$.trigger.sourceId",
                    "VariableB": "REMOVED"
                }
            ],
            "DefaultStep": "End Step - Success 1",
            "Name": "Compare Strings",
            "SelectInput": "$",
            "SelectOutput": "$",
            "SelectResult": "$",
            "Type": "choice"
        },
        "getIdentity": {
            "alias": "REMOVED",
            "attributes": {
                "adSamaccountName": "KVANG05",
                "addisplayname": "Van Gels, Kimberly",
                "adfirstname": "Kimberly",
                "adlastname": "Van Gels",
                "categoryReportGrouper2": "Primary",
                "cloudAuthoritativeSource": "2095e9f117664945ab33d202ca575bfa",
                "cloudLifecycleState": "inactive",
                "cloudStatus": "UNREGISTERED",
                "company": "REMOVED",
                "country": "USA",
                "disabledOu": "REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "displayName": "Van Gels, Kimberly",
                "email": "[email protected]",
                "empLinkedproviderid": "REMOVED",
                "employeeType": "Employee",
                "endDate": "2024-09-05",
                "epicDefaultlinkedtemplateid": "REMOVED",
                "epicNotes": "10/24/2022 - This account was automated by Epic Security.\n09/07/2024 - Automated termination by SailPoint",
                "epicTermDate": "09/06/2024",
                "firstname": "Kimberly",
                "identificationNumber": "REMOVED",
                "identityState": "INACTIVE_LONG_TERM",
                "internalCloudStatus": "UNREGISTERED",
                "jobCode": "JC101372",
                "lastDayWorked": "2024-09-05",
                "lastSyncDate": "REMOVED",
                "lastname": "Van Gels",
                "licenseStatus": "unlicensed",
                "linkedProviderId": "REMOVED",
                "location": "REMOVED",
                "locationId": "0204",
                "managerId": "No Saba Account",
                "middleInitial": "A",
                "middleName": "A.",
                "moverTrigger": "null:null:null:null:null",
                "newRbpgPositionCode": "||JC101372",
                "positionCode": "P226183",
                "preferredFirstname": "Kimberly",
                "preferredLastname": "Van Gels",
                "preferredName": "Kimberly Van Gels",
                "rbpgOffsetDays": "1",
                "rbpgPositionCode": "null|null|JC101372",
                "rbpgTrigger": null,
                "sabaLocation": "No Saba Location",
                "seczettaCorrelationKey": "REMOVED",
                "serProviderid": "REMOVED",
                "servicenowREMOVEDGrantTableCorrelation": "REMOVED",
                "snowAccount": "Provision Account on 2023-12-07T08:21:47Z",
                "standardOu": "OU=Standard,OU=Users,REMOVED,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "startDate": "2022-10-24",
                "terminationReason": "Voluntary",
                "uid": "kvang05",
                "updatedSeczettaManager": "REMOVED",
                "updatedseczettaemailaddress": null,
                "userSubType": "Employee",
                "workdayCorrelationKey": "REMOVED"
            },
            "created": "2023-08-15T19:08:18.656Z",
            "emailAddress": "[email protected]",
            "id": "REMOVED",
            "identityStatus": "UNREGISTERED",
            "isManager": false,
            "lastRefresh": "2024-09-09T10:07:57.281Z",
            "lifecycleState": {
                "manuallyUpdated": false,
                "stateName": "inactive"
            },
            "managerRef": null,
            "modified": "2024-09-09T10:07:57.340Z",
            "name": "Van Gels, Kimberly",
            "processingState": null
        },
        "trigger": {
            "_meta": {
                "invocationId": "REMOVED",
                "subscriptionId": "REMOVED",
                "triggerType": "FIRE_AND_FORGET"
            },
            "attributes": {
                "IIQDisabled": true,
                "NetBIOSName": null,
                "accountFlags": [
                    "Normal User Account",
                    "User Account is Disabled"
                ],
                "cn": "kvang05",
                "distinguishedName": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "idNowDescription": "REMOVED",
                "memberOf": [
                    "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC"
                ],
                "msDS-PrincipalName": "LAB3CHILD\\kvang05",
                "msNPAllowDialin": "Not Set",
                "newSamAccountName": "kvang05",
                "objectClass": [
                    "top",
                    "person",
                    "organizationalPerson",
                    "user"
                ],
                "objectSid": "REMOVED",
                "objectType": "user",
                "objectguid": "{REMOVED}",
                "passwordLastSet": 1707797709447,
                "primaryGroupDN": "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "primaryGroupID": "513",
                "pwdLastSet": "REMOVED",
                "sAMAccountName": "kvang05"
            },
            "id": "REMOVED",
            "identityId": "REMOVED",
            "identityName": "REMOVED",
            "nativeIdentifier": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "sourceId": "REMOVED",
            "sourceName": "Active Directory [source]",
            "uuid": "{REMOVED}"
        },
        "verifyDataType": {
            "ChoiceList": [
                {
                    "Comparator": "IsNull",
                    "NextStep": "Send Email 1",
                    "VariableA.$": "$.getIdentity.managerRef.id"
                }
            ],
            "DefaultStep": "Verify Data Type 1",
            "Name": "Verify Data Type",
            "SelectInput": "$",
            "SelectOutput": "$",
            "SelectResult": "$",
            "Type": "choice"
        }
    },
    "stepName": "verifyDataType",
    "task": "sp:internal:operator"
}
{
    "attempts": 1,
    "displayName": "Verify Data Type",
    "stepName": "verifyDataType",
    "task": "sp:internal:operator"
}
{
    "displayName": "Verify Data Type",
    "result": {
        "next": "Send Email 1",
        "output": true
    },
    "stepName": "verifyDataType",
    "task": "sp:internal:operator"
}
{
    "displayName": "Send Email 1",
    "input": {
        "body": {
            "context": {
                "displayName": "Van Gels, Kimberly",
                "employeeNumber": "REMOVED",
                "managerName": "Kimberly",
                "startDate": "2022-10-24",
                "uid": "kvang05",
                "upn.$": "$.getIdentity.attributes.upn"
            },
            "emailTemplate": {
                "body": "<html>\n<body lang=EN-US link='#0563C1' vlink='#954F72' style='word-wrap:break-word'>\n\t<div class=WordSection1>\n\t\t<table border=0 cellspacing=0 cellpadding=0 style='margin-left:-4.5pt;border-collapse:collapse'>\n\t\t\t<tr style='height:23.4pt'>\n\t\t\t\t<td width=845 style='width:634.05pt;background:#001F5F;padding:.05in .05in .05in .05in;height:23.4pt'>\n\t\t\t\t\t<p style='color:white'>\n\t\t\t\t\t\tACTION REQUIRED\n\t\t\t\t\t\tNew Hire Provisioning Next Steps</span><span style='font-size:16.0pt'>\n\n\t\t\t\t\t\t</span>\n\t\t\t\t\t</p>\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\t\t\t\tDear REMOVED Leader or delegate:\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>\n\t\t\t\tA new team member is joining your team and is ready to have the required access and IT equipment\n\t\t\t\trequested.\n\n\t\t\t</span></p>\n\t\t<p style='line-height:200%'><span style='font-size:12.0pt;line-height:200%;color:black'>The\n\t\t\t\tprovisioning process must be initiated within <b><u><span\n\t\t\t\t\tstyle='font-size:12.0pt;line-height:200%;color:#0070C0'>2 weeks prior</span></u></b>  to the employee's start date.\n\n\n\t\t\t</span></p>\n\t\t<p><span style='font-size:12.0pt;color:black'>Employees Name:\n\t\t\t\t<span >${displayName}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Start Date:\n\t\t\t\t<span>${startDate}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>Assigned user ID:\n\t\t\t\t<span>${uid}</span></span><br></br>\n\t\t<span style='font-size:12.0pt;color:black'>REMOVED Microsoft ID:\n\t\t\t\t<span>${upn}</span></span><br></br>\n\t\t</p>\n\t\t<p><span style='font-size:12.0pt;color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><b><u><span style='font-size:12.0pt;color:black'>Please,\n\t\t\t\t\t\treach out to your new hire to confirm:</span></u></b></p>\n\t\t<ul style='margin-top:0in' type=disc>\n\t\t\t<li style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Details of the position</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Dress code\n\t\t\t\t\trequirements</span></li>\n\t\t\t<li class=MsoListParagraph style='color:black;margin-left:0in'><span style='font-size:12.0pt'>Their work\n\t\t\t\t\tschedule (including where and when they are expected to be after\n\t\t\t\t\tthe first day New Employee Welcome is complete).\n\n\t\t\t\t</span></li>\n\t\t</ul>\n\t\t<table width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t<tr width=570 style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;'>\n\t\t\t\t<td width=570 valign=top style='border-top:soild #008487;border-left:soild #008487;border-bottom:soild #008487;border-right:soild #008487;background:#008487;padding:0in 5.4pt 0in 5.4pt;height:.3in; font-size:16.0pt;color:white'>\n\t\t\t\tCurrent access automatically granted:\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table>\n\t\t<table width=570>\n\t\t\t<tr >\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse; border-style: soild;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Active Directory</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Properly connects users to the REMOVED network</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>ServiceNow</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to submit an e-Help ticket, only.</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse'>MS Authenticator</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft Authenticator & Password Self-Service                (enrollment will be required by user) </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Microsoft 0365</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Email / OneDrive / Teams\n\t\t(for all REMOVED employees)<br></br>\n        Please Note - ServiceNow request is required for Contingent Workers to be provisioned an email account)\n\t\t</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix Icons</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Citrix icons including Epic User Prod/Playground/Training, LMS and REMOVED Intranet. <li>Request for <a href='https://REMOVED.sharepoint.com/sites/InformationSecurity-REMOVED/SitePages/IAM%20Provisioning/Epic-Onboarding-Changes-Homepage.aspx?OR=Teams-HL&CT=1717607688227'>Epic access</a> will need to be submitted.</li>  </td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>REMOVED Intranet</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Ability to access REMOVED Intranet</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t\t   <td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>LMS</td>\n\t\t\t\t<td style='border: 1px solid black;border-collapse: collapse;padding:0in 5.4pt 0in 5.4pt;height:.3in;'>Learning/required courses sent to all REMOVED Employees and Contingent Workers</td>\n\t\t\t</tr>\n\t\t</table>\n        \n<p class=MsoNormal><span style='font-size:18.0pt;color:#002060'>Please visit the <a\n\t\t\t\t\thref=\"https:/REMOVED.service-now.com/sp\">Service Portal</a> to request additional system access and IT equipment.\n\t\t\t\t<o:p></o:p></span>\n                <ul><li>\n                For entity 0033 (System Office) and 0009 (IHT) team members, click <a href='https://REMOVED.service-now.com/sp?id=sc_category&sys_id=bda16d141b2186109cc7c99f1d4bcb46&catalog_id=e0d08b13c3330100c8b837659bba8fb4&spa=1'>here</a>.\n                </li></ul></p>\n\t\t<p><span style='color:black'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:black'>Please direct any questions to the <a\n\t\t\t\t\thref='https://REMOVED.sharepoint.com/sites/TechnologyServiceCenterSupport/SitePages/Contact-the-TSC.aspx'>Technology\n\t\t\t\t\tService Center (TSC)</a> via <a\n\t\t\t\t\thref='https:/REMOVED.service-now.com/sp?id=report_an_issue&amp;sys_id='><span\n\t\t\t\t\t\tstyle='color:#0563C1'>eHelp</span></a> or calling 866-REMOVED-Help (866-776-4357)</span>\n\t\t</p>\n\n\t\t<p><span style='color:#002060'>\n\n\n\t\t\t</span></p>\n\t\t<p><span style='color:#002060'><img border=0 width=323 height=65 style='width:3.3645in;height:.677in'\n\t\t\t\t\tid='Picture_x0020_1'\n\t\t\t\t\tsrc='REMOVED'></span>\n\n\t\t</p>\n\t\t<p>\n\n\n\t\t</p>\n\t</div>\n</body>\n\n</html>",
                "from": "[email protected]",
                "replyTo": "[email protected]",
                "subject": "New Hire ${displayName} Next Steps Needed - NO MANAGER"
            },
            "medium": "EMAIL",
            "recipientEmailList": "[email protected]"
        },
        "context": {
            "displayName": "Van Gels, Kimberly",
            "employeeNumber": "REMOVED",
            "managerName": "Kimberly",
            "startDate": "2022-10-24",
            "uid": "kvang05",
            "upn.$": "$.getIdentity.attributes.upn"
        },
        "from": "[email protected]",
        "method": "POST",
        "path": "notification/send-notification",
        "recipientEmailList": [
            "[email protected]"
        ],
        "replyTo": "[email protected]",
        "service": "hermes",
        "subject": "New Hire ${displayName} Next Steps Needed - NO MANAGER",
        "useInternalClient": true
    },
    "stepName": "sendEmail1",
    "task": "sp:send-email"
}
{
    "attempts": 1,
    "displayName": "Send Email 1",
    "stepName": "sendEmail1",
    "task": "sp:send-email"
}
{
    "displayName": "Send Email 1",
    "result": {},
    "stepName": "sendEmail1",
    "task": "sp:send-email"
}
{
    "displayName": "End Step - Success",
    "input": {},
    "stepName": "End Step - Success",
    "task": "sp:internal:operator"
}
{
    "attempts": 1,
    "displayName": "End Step - Success",
    "stepName": "End Step - Success",
    "task": "sp:internal:operator"
}
{
    "displayName": "End Step - Success",
    "result": {},
    "stepName": "End Step - Success",
    "task": "sp:internal:operator"
}
{
    "result": {
        "18251c81-726b-4224-9b23-0b580e2f2bf6": "615cafb3-d16a-4d89-be9c-845542414770",
        "compareStrings": {
            "ChoiceList": [
                {
                    "Comparator": "StringEquals",
                    "NextStep": "Get Identity",
                    "VariableA.$": "$.trigger.sourceId",
                    "VariableB": "REMOVED"
                }
            ],
            "DefaultStep": "End Step - Success 1",
            "Name": "Compare Strings",
            "SelectInput": "$",
            "SelectOutput": "$",
            "SelectResult": "$",
            "Type": "choice"
        },
        "getIdentity": {
            "alias": "REMOVED",
            "attributes": {
                "adSamaccountName": "KVANG05",
                "addisplayname": "Van Gels, Kimberly",
                "adfirstname": "Kimberly",
                "adlastname": "Van Gels",
                "categoryReportGrouper2": "Primary",
                "cloudAuthoritativeSource": "2095e9f117664945ab33d202ca575bfa",
                "cloudLifecycleState": "inactive",
                "cloudStatus": "UNREGISTERED",
                "company": "REMOVED",
                "country": "USA",
                "disabledOu": "REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "displayName": "Van Gels, Kimberly",
                "email": "[email protected]",
                "empLinkedproviderid": "REMOVED",
                "employeeType": "Employee",
                "endDate": "2024-09-05",
                "epicDefaultlinkedtemplateid": "REMOVED",
                "epicNotes": "10/24/2022 - This account was automated by Epic Security.\n09/07/2024 - Automated termination by SailPoint",
                "epicTermDate": "09/06/2024",
                "firstname": "Kimberly",
                "identificationNumber": "REMOVED",
                "identityState": "INACTIVE_LONG_TERM",
                "internalCloudStatus": "UNREGISTERED",
                "jobCode": "JC101372",
                "lastDayWorked": "2024-09-05",
                "lastSyncDate": "REMOVED",
                "lastname": "Van Gels",
                "licenseStatus": "unlicensed",
                "linkedProviderId": "REMOVED",
                "location": "REMOVED",
                "locationId": "0204",
                "managerId": "No Saba Account",
                "middleInitial": "A",
                "middleName": "A.",
                "moverTrigger": "null:null:null:null:null",
                "newRbpgPositionCode": "||JC101372",
                "positionCode": "P226183",
                "preferredFirstname": "Kimberly",
                "preferredLastname": "Van Gels",
                "preferredName": "Kimberly Van Gels",
                "rbpgOffsetDays": "1",
                "rbpgPositionCode": "null|null|JC101372",
                "rbpgTrigger": null,
                "sabaLocation": "No Saba Location",
                "seczettaCorrelationKey": "REMOVED",
                "serProviderid": "REMOVED",
                "servicenowREMOVEDGrantTableCorrelation": "REMOVED",
                "snowAccount": "Provision Account on 2023-12-07T08:21:47Z",
                "standardOu": "OU=Standard,OU=Users,REMOVED,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "startDate": "2022-10-24",
                "terminationReason": "Voluntary",
                "uid": "kvang05",
                "updatedSeczettaManager": "REMOVED",
                "updatedseczettaemailaddress": null,
                "userSubType": "Employee",
                "workdayCorrelationKey": "REMOVED"
            },
            "created": "2023-08-15T19:08:18.656Z",
            "emailAddress": "[email protected]",
            "id": "REMOVED",
            "identityStatus": "UNREGISTERED",
            "isManager": false,
            "lastRefresh": "2024-09-09T10:07:57.281Z",
            "lifecycleState": {
                "manuallyUpdated": false,
                "stateName": "inactive"
            },
            "managerRef": null,
            "modified": "2024-09-09T10:07:57.340Z",
            "name": "Van Gels, Kimberly",
            "processingState": null
        },
        "sendEmail1": {},
        "trigger": {
            "_meta": {
                "invocationId": "REMOVED",
                "subscriptionId": "REMOVED",
                "triggerType": "FIRE_AND_FORGET"
            },
            "attributes": {
                "IIQDisabled": true,
                "NetBIOSName": null,
                "accountFlags": [
                    "Normal User Account",
                    "User Account is Disabled"
                ],
                "cn": "kvang05",
                "distinguishedName": "CN=kvang05,REMOVEDDC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "idNowDescription": "REMOVED",
                "memberOf": [
                    "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC"
                ],
                "msDS-PrincipalName": "LAB3CHILD\\kvang05",
                "msNPAllowDialin": "Not Set",
                "newSamAccountName": "kvang05",
                "objectClass": [
                    "top",
                    "person",
                    "organizationalPerson",
                    "user"
                ],
                "objectSid": "REMOVED",
                "objectType": "user",
                "objectguid": "{REMOVED}",
                "passwordLastSet": 1707797709447,
                "primaryGroupDN": "CN=Domain Users,CN=Users,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
                "primaryGroupID": "513",
                "pwdLastSet": "REMOVED",
                "sAMAccountName": "kvang05"
            },
            "id": "REMOVED",
            "identityId": "REMOVED",
            "identityName": "REMOVED",
            "nativeIdentifier": "CN=kvang05,REMOVED,DC=LAB3CHILD,DC=LAB3ROOT,REMOVED,DC=LOC",
            "sourceId": "REMOVED",
            "sourceName": "Active Directory [source]",
            "uuid": "{REMOVED}"
        },
        "verifyDataType": {
            "ChoiceList": [
                {
                    "Comparator": "IsNull",
                    "NextStep": "Send Email 1",
                    "VariableA.$": "$.getIdentity.managerRef.id"
                }
            ],
            "DefaultStep": "Verify Data Type 1",
            "Name": "Verify Data Type",
            "SelectInput": "$",
            "SelectOutput": "$",
            "SelectResult": "$",
            "Type": "choice"
        }
    }
}
2

I had a different use case where there is a manual action needed from the application team to completely provision the access. I used the “Provisioning Completed” trigger and I was able to properly filter on the source and the action.

Also, I believe the trigger “Source account created” is an early access trigger, so it would be best to avoid using it for such a crucial workflow.

3

Hi @mpotti ,

A similar use case is solved in the below discussion. Will be good to have a look.

4

Hi @mpotti ,

Agree with @MeKhalbi and @mohammedfavazhrb , instead of using Source Account Created Trigger, you can try Provisioning Completed trigger with below Filter:

$.accountRequests[?(@.accountOperation == "Create" && @.provisioningResult == "SUCCESS" && @.source.name == "TARGET SOURCE NAME")]

5

Thank you everyone. I am in the process of testing the recommendations. I will post the results once testing is complete.

6

I was able to put that filter on the trigger action. When testing it the event was not triggered when a new account was created for the target source. Any ideas why the filter would not be working as expected?

image
image1402×392 13.9 KB

image

image
image1558×155 8.01 KB

7

Can you share the execution log? Probably the @.provisioningResult can be checked as Committed also along with Success

$.accountRequests[?(@.accountOperation == "Create" && (@.provisioningResult == "SUCCESS" || @.provisioningResult == "committed) && @.source.name == "TARGET SOURCE NAME")]

8

Thank you everyone for the help on this issue. Due to requirements and the amount of time I have already spent on this project leadership gave me the green light to move this process outside of IdN. This is now being done via a batch job on an external server.