Workflow Provisioning completed filter error

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,

A user has explicitly requested entitlement1 and entitlement2 and needs to send an email notfication. When I try to apply the filter below, it shows a JSON error. Any idea?

$.accountRequests[?(@.source.id ==“9b3f56b45071402cb07274c019cefc02”)] .attributeRequests[?(@.attributeValue == “Entitlement1” || @.attributeValue == “Entitlement2”)]

image
image1310×444 32.1 KB

2

Hi @pkumar22 ,

Just try using this:
$.accountRequests[?(@.provisioningResult == ‘committed’ && @.provisioningTarget == ‘Source_Name’ && (@.attributeRequests[].attributeValue == ‘Entitlement_ID1’ || @.attributeRequests[].attributeValue == ‘Entitlement_ID2’))]

Else,

  1. Use provisioning trigger → $.accountRequests[*].attributeRequests[?(@.attributeValue == ‘Entitlement_ID’ || @.attributeValue == ‘Entitlement_ID2’)]
  2. Use verify data type to check the source in which the provisioning done.

I have not verified this but something like this should work :relieved:.

Thanks!

1 Like
3

Please let me know if this worked

4

I tried both, but it did not work.

5

Shall I know in which step you got the error.

General info:

While using provisioning workflow,

  1. source in which the provision happened will be identified by path “accountRequests[*].provisioningTarget”
  2. attribute value will be identitified by path “accountRequests[* ].attributeRequests[*].attributeValue”
  3. provisioning result can be got through “accountRequests[*].provisioningResult”
6

You’re trying to filter on nested lists (with filters at different levels). I’m not sure if you can do that with JSON Path.
What you can do is filter on the provisioningResult && provisioningTarget, then loop through the requests in the next step(s) to check the attributeValue in a compare string step.

1 Like
7

Hi @pkumar22,

Can you try with a single quote instead of double quote in the filter. The below ones work for me

$.accountRequests[?(@.source.id =='9b3f56b45071402cb07274c019cefc02')].attributeRequests[?(@.attributeValue == 'Entitlement1' || @.attributeValue == 'Entitlement2')]

$.accountRequests[*].attributeRequests[?(@.attributeValue == 'Entitlement1' || @.attributeValue == 'Entitlement2')]

You may also want to try deleting the trigger node and re-creating it again if it still throws the error.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.