In SailPoint IdentityIQ, when a user submits a request containing multiple items (e.g., roles or entitlements), I want to automatically split each item into a separate request within the LCM Provisioning Business Process.
Has anyone implemented this before? What’s the best approach to achieve this in IIQ? Any insights or recommendations would be highly appreciated!
#SailPoint identityiq #IAM provisioning #LCM #SailPointCommunity
Hi @lojainahmed,
take a look on this topic.
You could do this with a wrapper workflow that takes the request, takes the list of account requests and for each account request which should at that point just contain one item (role or entitlement), you clone the empty plan and add a single account request. This is returned to the workflow as a list of plans.
In another plan you use the step replicator to start the LCM Provisioning workflow for each part of the plan.
Keep in mind though, this may have side effects. If things depend on each other, things may not work as expected, so in your split logic, you may need to keep those things in mind. E.g. you request a business role with optional permitted roles. If the permitted roles get approved, but the business role does not, you basically create an unwanted situation.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
