Thirdparty App Entitlement Not getting remove

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

So what this script doing is its removing entitlement for connected apps (IIQ apps) but not not bizz apps or delimited apps.. so problem is identity contains entitlement of both IIQ apps and delimited apps and if i trigger this script IIQ app entitlements are getting removed but not delimited apps.

Identity identity = context.getObjectByName(Identity.class, identityName);
List bundles = identity.getAssignedRoles();

ProvisioningPlan plan = new ProvisioningPlan();
AccountRequest accReq = new AccountRequest();
plan.setIdentity(identity);
accReq.setApplication(ProvisioningPlan.APP_IIQ);
accReq.setOperation(AccountRequest.Operation.Modify);

for(Bundle bundle : bundles) {
    String bundleName = bundle.getName();
    log.debug("Processing role/bundle: " + bundleName);
    
    accReq.add(new AttributeRequest("assignedRoles", ProvisioningPlan.Operation.Remove, bundleName));
}

plan.add(accReq);


log.debug("Provisioning Plan prepared: " + plan.toXml());

Provisioner provisioner = new Provisioner(context);
provisioner.execute(plan);

i tried by removing this line.still no luck
accReq.setApplication(ProvisioningPlan.APP_IIQ);

2

Hi @autorun6464 - is it creating a manual workitem for the delimited apps?

3

Hello @autorun6464

Since delimited apps aren’t provisioned, those changes are ignored or just stay in the identity object, not triggering provisioning. Sailpoint will raise manual workitem for human review and complete provisioning on application side. Updated feed file will then aggregated back to Sailpoint

4

it is creating access request with approval state finished but provisioning status Pending

5

but i need to remove all entitlements during termination… with this scirot it is removing IIQ app but not for delimited . so if provisioning doesnot work here is the any way around to remove delimited entitlements as well during termination