When Campaign revoke provisioning fails create SNOW ticet

[Pkkumar]

I want to create a ticket when certificate revocation fails during provisioning. I have created the following workflow and applied below filter, but it did not work. Any idea?

$.accountRequests[?(@.source.name == “ServiceNow Governance” && @.provisioningResult == “FAILED”)]

$.accountRequests[?(@.operation == “Modify” && @.source.name == “ServiceNow Governance” && @.provisioningResult == “FAILED”)]

the below one Json error

$.accountRequests[?(@.source.name == “ServiceNow Governance” && @.provisioningResult == “FAILED” && @.attributeRequests[?(@.operation == “Remove”)])]

I checked below url not found anything.

Search query for the When an IDN campaign or other provisioning "revoke" fails (events where "Remove Entitlement Failed")

Hi @mrahulbb , If you need a search query to get the list of revocation failures for certification, it can be as below for Events: “<source_name>” AND status:FAILED AND operation:REMOVE But, it may not achieve an automated email initiation for failure, for that you need to go with workflow. Regards, Uday Kilambi

[Mobou123 (Mohamed Boualam)]

Hi PK!

The issue is most likely with the JSONPath syntax and field names. In SailPoint workflow filters, provisioningTarget is typically used instead of source.name, and provisioningResult is usually lowercase ("failed" instead of "FAILED").

Try this filter first to validate the trigger fires:

$.accountRequests[?(@.provisioningTarget == "ServiceNow Governance" && @.provisioningResult == "failed")]

Then expand it further if needed:

$.accountRequests[?(@.provisioningTarget == "ServiceNow Governance" && @.provisioningResult == "failed" && @.accountOperation == "Modify")].attributeRequests[?(@.operation == "Remove")]

Also make sure you are using standard quotes " " and not smart quotes “ ”.

One additional recommendation — temporarily remove the filter and inspect the actual provisioning event payload. In many cases the operation/value differs from what is expected (Remove vs Disable/Delete/etc.), which causes the filter not to match.

If this helped you reach your goal please mark it as solution!