I am creating the workflow for sending email to the app owner,
The actual requirement is that when any user removed from the particular AD entitlement one email sent to app owner so he can be aware about it.
this the filter i am using -
$[?(@.source.name == “Active Directory”)].entitlementChanges[?(@.removed[?(@.value == “CN=new test,OU=Groups,DC=corp,DC=company,DC=com”)])]
i have checked and it is not working as expected.
FYI - Native change enabled for the source AD and SF.
Can you try $[?(@.source.name == "Active Directory")] and use Compare step to check if the removed entitlement matches your target value? Also, this is a great resource: Native Change Detection Using Workflows
@AbhijitPatil the JSON returned by the NCD trigger is not an array it returns an JSON Object so the filter you are using will not work as the JSONPath you have requires an array.
Alternatively, you can try this.
$.entitlementChanges[*].removed[?(@.value=="CN=AccountsReceivable,OU=Groups,OU=Demo,DC=seri,DC=sailpointdemo,DC=com" && $.source.name=="Active Directory")]
What this does is, it directly goes to find the entitlementChanges, taps into the removed array and finds the entitlement you have to check and then at the same time goes back to the root object, and compares source.name.
Use sailpoint json path evaluator to evaluate the expression.
Letme know if this helps.