Sunset for roles without Time Machine

Hi all,

I am trying to test the sunset functionality for an entitlement in IIQ. I have set the sunset date to tomorrow. Can I test the deprovisioning without using the Time Machine?

Thanks in advance,
Rishav Ghosh

Hi @rishavghoshacc,

The time machine cannot be used to test the sunset feature. Please navigate to the identityiq/monitor/requests/requests.jsf page to review the request. The next launch will indicate the date for when the removal should take place.

Hi @Arun-Kumar ,
How do I find this request that I raised. I am not able to find the request. All the requests on this page are email requests

Hi @rishavghoshacc,

I hope, you have selected the below mentioned workflow in IdentityIq Configuration.
Filter the request list with Type. Type should be workflow Request.

Hi @Arun-Kumar ,

Can I manipulate the time to launch it in the next hour.
And in the workflow request, I dont see any remove operation to remove the access on the next day. Does SailPoint not remove the access on the sunset date by default?

Hi @rishavghoshacc,

You can change the enddate from debug for testing. Scheduled Assignment workflow take care of access removal.

1 Like

Hi @Arun-Kumar ,

Will this workflow also create a Access request when it removes the entitlement?

Hi @rishavghoshacc,

No, this will not create a Access Request when removing the access.