Workflow Loop Input Filter issue

[sagar_kamalakar]

Hi All,
I have a requirement to remove AD entitlements on day 21 after an identity is terminated, except AD ‘O365’ entitlements. I have implemented a workflow that triggers on Day 21 and executes successfully, but it is not removing any entitlements. The issue seems to be with the loop input filter, as the output of my loop is blank. Below is my current loop input filter.

$.hTTPRequest.body[0].access[?(@.type == "ENTITLEMENT" && @.source.name == "Active Directory" && @.name !=~ /.*O365.*/i)]

I am able to achieve this via ‘Get Access’ and ‘Manager Access’ actions, but I am unable to filter only the AD source entitlements. As a result, I chose to use the HTTP request option to filter the AD entitlements.

The following filter works with ‘Get Access’, but I am unable to add the AD source within this filter:

$.getAccess.accessItems[?(@.name !=~ /.*O365.*/i)]

Any pointers would be highly appreciated.

Thanks,
Sagar

[Santhakumar (Shantha Kumar)]

Hi @sagar_kamalakar did you try the sailpoint JSON path evaluator tool to check the filters it can be very handy to use that. Also you can get the sample output/input from workflow itself.

[sagar_kamalakar]

Hi @Santhakumar yes I tried JSON path evaluator tool its throwing out error on !=~ operator.

[kdfreeman (Kapil Dahal)]

use contains to filter all 0365 entitlements first and negate it to omit 0365 entitlements. Use json path evaluator to make your filter.

SailPoint Developer Community

[sagar_kamalakar]

Hi @kdfreeman, I tried my Jsonpath with above and it is returning the expected result
Here is the screenshot but same jsonpath not working in loop Input filter.

$.hTTPRequest.body[0].access[?(@.type == “ENTITLEMENT” && @.source.name ==“Active Directory” && @.name !=~ /.O365./i)]