To use the HTTP action, follow the below steps:
- Drag the HTTP action into the workflow builder
- Configure Authentication Type: OAuth
- Token URL: https://sailpointtenant.api.identitynow.com/oauth/token
- Request URL: https://sailpointtenant.api.identitynow.com/v3/search?count=true
- Method: POST
- Request Content Type: Json
- Request body:
{
"query": {
"query": "type:source_management AND name:\"Aggregate Source Account Passed\" AND target.name:\"source name\" AND created:<now-1w"
},
"indices": [
"events"
],
"includeNested": false,
"sort": [
"-created"
]
}
Note: Replace sailpointtenant with your tenant name in the URLs and in the json body replace source name with your source name or customize the query as needed
HTTP - Reference screenshot 1
HTTP - Reference screenshot 2
In the workflow, i am comparing the response count as shown below, so if the count is 0 then send email, if count is greater than 0 then do nothing
To know more on how to use HTTP action, refer: Using Workflow's HTTP Request Action to Work With IdentityNow APIs
I hope this helps.