Workflow for account and entitlement aggregation failuer

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

I need to develop a workflow that creates a ticket in ServiceNow whenever there are failures in account or entitlement aggregation. While I can successfully create tickets in ServiceNow, I’m encountering difficulties with monitoring account and entitlement aggregation. Specifically, in the ServiceNow ticket description, I require the source name where the aggregation failure occurred to be displayed in plain text format, but currently, it is presented as a hyperlink.

2

Hi @harishhaleon,

You can acheive that with this worflow :

image
image542×552 25.4 KB

Explanation :

  • As trigger you must use Account Aggregation completed wich will trigge all completed aggregation in your tenant.

  • With compare data strings you can check if aggregation status is Failure
    Here an example of account aggregation metadata :
    Triggers - SailPoint Identity Services

{
    "source":{
        "id":"4e4d982afddff4267ab12f0f1e72b5e6d",
        "name":"Corporate Active Directory",
        "type":"SOURCE"
    },
    "status":"Success",
    "started":"2020-06-29T22:01:50.474Z",
    "completed":"2020-06-29T22:02:04.090Z",
    "errors":[

    ],
    "warnings":[
        "Account skipped"
    ],
    "stats":{
        "scanned":200,
        "unchanged":190,
        "changed":6,
        "added":4,
        "removed":3
    }
}

In your Data string operator here a verification example :

image
image1119×675 41.7 KB

In true output of your compare data string, you can use Manage ServiceNow ticket for creating your ticket.

Also it’s a good idea to send an email too.

In this Blog : Using IdentityNow Workflows to Send a List of Uncorrelated Accounts After Aggregation i do a similary use case but it was to send notification with list of uncorrelated accounts after account aggregation and i use Aggregation completed

3

Hi @baoussounda - Thanks for your help on this! Any ideas on Entitlement aggregation failures?

4

Hi @harishhaleon, i don’t found a trigger for Entitlement aggregation. I think you can link it on account aggregation. I mean do an entiltment aggregation before or after account aggregation and then trigger entittlement. If your source is configure correctly and that aggregation is done successfully, i think groupe Aggregation too will be donne successfully too.

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.