I am creating a Workflow with Provisioning Completed Trigger.
I need to trigger it when:
A AccessProfile named “Quantum” revocation happens (remove operation) on “02. AD source”
This trigger filter works nicely.
$.accountRequests[?(@.provisioningTarget == ‘02. Active Directory’ && @.attributeRequests[*].operation == [‘Remove’])]
In Workflow Executions, I see on Trigger Step Input this:
{
"_meta":{
"invocationId": "13498daf-5c04-4ccc-a270-6de336116dd4" ,
"subscriptionId": "8473a270-24b4-431e-bcd1-da940c983218" ,
"triggerType": "FIRE_AND_FORGET"
},
"accountRequests":[{
"accountId": "RCD-63692" ,
"accountOperation": "Modify" ,
"attributeRequests":[{
"attributeName": "detectedRoles" ,
"attributeValue": "Quantum [AccessProfile-1780044089228]" ,
"operation": "Remove"
}],
"provisioningResult": "IdentityNow Task" ,
"provisioningTarget": "IdentityNow" ,
"source":{
"id": "IdentityNow" ,
"name": "IdentityNow" ,
"type": "SOURCE"
},
"ticketId": null
But when I try to add the “Quantum” AP name into filter. It never triggers. Regardles if i use “Quantum” or whole string “Quantum [AccessProfile-1780044089228]”
I tried also like to substitute operation=-“Remove” with AP name. But nothing. Maybe it is because the [] in AP name? I don’t see difference between operation and attributeValue.
$.accountRequests[?(@.provisioningTarget == ‘02. Active Directory’ && @.attributeRequests[*].attributeValue == [‘Quantum [AccessProfile-1780044089228]’])]
Any ideas how the trigger filter should look like to trigger only for this AP and Remove operation?
Ivan.
