# Workflow Provisioning trigger filter

**URL:** <https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, workflows\
**Created:** [July 23, 2026, 12:16pm UTC](https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144 "2026-07-23T12:16:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vasilcin3](https://avatars.discourse-cdn.com/v4/letter/v/fbc32d/32.png) [@vasilcin3](https://developer.sailpoint.com/discuss/u/vasilcin3)\
**Post date:** [July 23, 2026, 12:16pm UTC](https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144/1 "2026-07-23T12:16:45Z")

</div>

> I am creating a Workflow with Provisioning Completed Trigger.

I need to trigger it when:

A AccessProfile named “Quantum” revocation happens (remove operation) on “02. AD source”

This trigger filter works nicely.

$.accountRequests[?(@.provisioningTarget == ‘02. Active Directory’ && @.attributeRequests[\*].operation == [‘Remove’])]

In Workflow Executions, I see on Trigger Step Input this:

```auto
{

"_meta":{

"invocationId": "13498daf-5c04-4ccc-a270-6de336116dd4" ,

"subscriptionId": "8473a270-24b4-431e-bcd1-da940c983218" ,

"triggerType": "FIRE_AND_FORGET"

},

"accountRequests":[{

"accountId": "RCD-63692" ,

"accountOperation": "Modify" ,

"attributeRequests":[{

"attributeName": "detectedRoles" ,

"attributeValue": "Quantum [AccessProfile-1780044089228]" ,

"operation": "Remove"

}],

"provisioningResult": "IdentityNow Task" ,

"provisioningTarget": "IdentityNow" ,

"source":{

"id": "IdentityNow" ,

"name": "IdentityNow" ,

"type": "SOURCE"

},

"ticketId": null

```

But when I try to add the “Quantum” AP name into filter. It never triggers. Regardles if i use “Quantum” or whole string “Quantum [AccessProfile-1780044089228]”

I tried also like to substitute operation=-“Remove” with AP name. But nothing. Maybe it is because the [] in AP name? I don’t see difference between operation and attributeValue.

$.accountRequests[?(@.provisioningTarget == ‘02. Active Directory’ && @.attributeRequests[\*].attributeValue == [‘Quantum [AccessProfile-1780044089228]’])]

Any ideas how the trigger filter should look like to trigger only for this AP and Remove operation?

Ivan.

---

<div class="post-metadata">

**Author:** ![vasilcin3](https://avatars.discourse-cdn.com/v4/letter/v/fbc32d/32.png) [@vasilcin3](https://developer.sailpoint.com/discuss/u/vasilcin3)\
**Post date:** [July 23, 2026, 12:40pm UTC](https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144/2 "2026-07-23T12:40:38Z")

</div>

Sorry for spam, meantime i solved the issue. The correct filter has to be like this:

$.accountRequests[?(@.attributeRequests[_].attributeValue contains “Quantum [AccessProfile-1780044089228]” && @.attributeRequests[_].operation == [‘Remove’])]

i had to use contains, somethin to do with array of objects etc.

Issue is solved 🙂

---

<div class="post-metadata">

**Author:** ![MattUribe](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/matturibe/32/20300_2.png) [@MattUribe](https://developer.sailpoint.com/discuss/u/MattUribe)\
**Post date:** [July 23, 2026, 2:07pm UTC](https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144/3 "2026-07-23T14:07:45Z")

</div>

Glad you solved it - and it’s not spam at all. Someone in the future may reference your post and find it useful!

Matt

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 21, 2026, 2:07pm UTC](https://developer.sailpoint.com/discuss/t/workflow-provisioning-trigger-filter/217144/4 "2026-09-21T14:07:50Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.