We need to send an email notification to the ServiceNow Team distribution list once access has been revoked (or Disable user) from an user in a JDBC application

[Venu1010 (Venugopala Hs)]

Hi Team,

We have a requirement in SailPoint IdentityNow (IDN) where we need to send an email notification to the ServiceNow Team distribution list once access has been revoked (Disable user) from an user in a JDBC application. This JDBC application has been integrated into SailPoint as an authoritative source.

Could you please advise how we can achieve this in IdentityNow?

Note: I’m aware that this can be accomplished using an after-provisioning rule in IdentityIQ (IIQ). However, I’m not familiar with the process in IdentityNow. Could you please provide guidance on how to implement this functionality in IDN?

Specifically, we’re looking for a method to:

1. Detect when access is revoked from the JDBC application
2. Trigger an email notification
3. Send that notification to the ServiceNow Team distribution list

Any step-by-step instructions or references to relevant IDN features would be greatly appreciated. Thank you for your assistance in this matter.

Regards,
Venu

[udayputta]

This can be implemented using Workflow in ISC. Your JDBC application is auth source so you can trigger the workflow when there is a change in cloudlifecyclestate. You can do few checks and use Send Email action to send the email to ServiceNow Team distribution

[Venu1010 (Venugopala Hs)]

Thank you for the inputs. any sample do you have for reference?

[udayputta]

I do not have a sample. But it will be pretty simple workflow. I am assuming you will have the below steps in the workflow

1. Trigger - Identity Attribute Change
2. Get Identity
3. Compare String - To check if LCS is inactive
4. Send Email
5. End Step

[mpotti (Mark Potter)]

One thing to note on the email side. Ensure that the DL has been enabled to receive external emails. This could be confusing to troubleshoot if that feature is not enabled.