Web Service Connector: Is It Possible to Access Identity Attributes During Entitlement Removal?

[jwshin (Jaewon Shin)]

Hi @lampard08 ,

You may want to take a look at the following discussion:

Can't retrieve Identity in Web Services Before Operation Rule

Hello everyone, We are using a custom source for a webservices connector to make REST API calls to a target application. For the create account operation, we are using a before operation rule to perform a couple of staging actions. One of those staging actions requires obtaining information about the target user’s identity. In other SailPoint posts I’ve seen references to users retrieving the identity from the provisioning plan by calling plan.getIdentity(). That does not work for us. provisio…

Based on the discussion above, it is described that Web Service Connectors do not automatically map or populate identity attributes into the provisioningPlan object by default.

Because of this behavior, identity attributes are generally not available in the Before Operation Rule, and it is typically not possible to retrieve detailed identity information directly from the provisioning plan during entitlement removal.

I wanted to check whether this behavior is a known and intended platform limitation, or if there is another supported or recommended approach to access identity attributes in this context.

Regards,