Understanding IdentityIQ Approval Flow and Extension Points

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Hi Everyone,

I’m trying to understand how the IdentityIQ approval process works internally and have a few questions.

  1. Which workflow is responsible for creating approval work items for access requests?
    • Is it always LCM Provisioning, or can it be Identity Request Approve, Provisioning Approval Subprocess, or another workflow depending on the request?
  2. How is the Approvals page (My Work → Approvals) tied to the workflow?
    • Does it directly read from WorkItem objects?
    • How does it determine which approval item to display?
  3. When an approver opens an approval request, what information is available in the current context?
    • Work Item ID
    • Identity
    • Request ID
    • ApprovalSet
    • ProvisioningPlan
    • Other objects?
  4. Is there a supported way to add additional information or a custom panel to the standard approval page without modifying SailPoint core files?
  5. Is the recommended approach to use an IdentityIQ Plugin, or is there another supported extension mechanism for enhancing the approval UI?
  6. Are there any documents or developer guides that explain the complete flow from:
    • Access Request Submission
    • Workflow Execution
    • Work Item Creation
    • Approval UI
    • Approval Completion
    • Provisioning

Any documentation, best practices, or examples would be greatly appreciated.

Thank you!

2

@sagr0812 I think you might want to read the white papers to understad the flow better: IdentityIQ Technical White Papers - Compass

Please start with Workflow section. it’ll have details about LCM, sub process, scripts, variables available etc. This should be a better starting point for you.

You can also go over the Rules to see what type of rules are available.