SSBP Not Executing During Workflow Disable Operation

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi All,

Does services standard before provisioning rule not trigger upon any workflow operations? I have a disable operation in a workflow that should ideally invoke remove entitlements in AD from the cloudServicesIDNSetup. But I see the SSBP has not been triggered upon this workflow disable operation.

2

Hey @varshini303

Did you use the setup like below?

"cloudServicesIDNSetup": {
            "eventConfigurations": [
                {
                    "eventActions": [
                        {
                            "Action": "RemoveADEntitlements",
                            "Attribute": "memberOf",
                            "Value": null
                        }
                    ],
                    "Identity Attribute Triggers": [
                        {
                            "Attribute": "cloudLifecycleState",
                            "Value": "terminated",
                            "Operation": "eq"
                        }
                    ],
                    "Operation": "Enable"
                }
            ]
        }
3

Yes, my setup is something like this.

In the event actions, I have tried multiple combinations in the Value field:

One with null and the other with the default one group “CN=Domain Users,CN=Builtin,DC=example,DC=com”.

4

Can you share the screenshot of the code snippet if possible?

5

You did attach the rule to the source, right? There should be a beforeProvisioningRule property in the source json that is a ref object to the rule

"beforeProvisioningRule": {
    "type": "RULE",
    "id": "<<rule Id in your tenant>>",
    "name": "Services Standard IdentityNow Before Provisioning Rule"
}