Targeted certifications - Certifier Rule

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.2p7

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

*Hello everyone, We have a targeted certification for which we want to prevent self approval. We are trying to use the certifier rule to achieve the same. But, the certifier rule reassigns the whole set of items to new owner instead of specific cert items that we want to reassign. Is there a way around this ? *

3

Hi @Srivats_28 ,

You can achieve this functionality through a pre-delegation rule
The bulkReassign method is used to reassign a specific line item to a new owner.
Please refer the code.

import java.util.Arrays;
import java.util.List;
import java.util.ArrayList;
import sailpoint.object.Identity;
import sailpoint.object.*;

List items = entity.getItems();
certifierName = certification.getCertifiers().get(0);
Identity EOCertifier = context.getObjectByName(Identity.class, certifierName);
List reassignItems = new ArrayList();
String entitlementName="";
Identity requester = certification.getCreator(context);
Identity EOManager = EOCertifier.getManager();
String description = "Pre-Delegation for Entitlement Owner Certification";

for (CertificationItem item : items)
{
    String user = item.getTargetName();
    if (user.equalsIgnoreCase(EOCertifier.getName()))
{
   reassignItems.add(item);
    }
}
if (reassignItems != null)
{
String comments = "This certification is re-assigned to you to prevent self certification as <b>" + EOCertifier.getName() + "</b> is a certifier of Entitlement(s) and also has access to the entitlement for the <b>" + entity.getApplication() + "</b> Application. <br>";

if (EOCertifier.getManager() != null)
{
  certification.bulkReassign(requester, reassignItems, EOManager, description, comments, context.getConfiguration());
}
else
{
  certification.bulkReassign(requester, reassignItems, requester, description, comments, context.getConfiguration());
}
}
4

Hi @Arun-Kumar , thanks for your response! But, since this is a targeted certification, the pre-delegation rule cannot be used for reassignments as per sailpoint document. Any other alternatives ?