I need to be able to track who canceled an access request in SailPoint IIQ, without relying solely on the audit log. I was considering the option of making comments mandatory during request cancellation as they contain the necessary details, but unfortunately this setting is not possible.
Could someone guide me on how to handle this problem and be able to always leave access requests traceable?
Without putting any comments it will not log the details, OOB this is not supported i think. But if you want to try then in LCM Provisioning workflow, you can find the Finalize step, during the Cancel of Request if you are not putting any comments then approvalSet does not have any comments. You can put some log and print approvalSet.
You Can try to put some logic in LCM Provisioning before finalize and try to set default comment in this case in approvalSet.
Hope this should work. Let me know if not work then i can do some POC in my lab.