Workflow to send custom email

[JagadeshMuchumarri]

Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Please consider addressing the following when creating your topic:

• What have you tried?
• What errors did you face (share screenshots)?
• Share the details of your efforts (code / search query, workflow json etc.)?
• What is the result you are getting and what were you expecting?

I’m implementing access request in SailPoint. When request is submitted to a source entitlement,

a. if user account is present, entitlement is added to the account.

b. If user account is not present, account is created.

Now i want to use workflow to trigger for Provisioning complete. This workflow should trigger a script which is on my IQ service. This script generates random password for AD and send email. How can i trigger my script from workflow?
Is there any examples or sample code on how this works?

Thanks in advance for the help.

[msingh900 (Manish Singh)]

@JagadeshMuchumarri

This workflow should trigger a script which is on my IQ service. This script generates random password for AD and send email. How can i trigger my script from workflow?

If you want to call a PowerShell script from the workflow, you will have to create custom HTTP endpoint outside of Identity Security Cloud that will trigger the PowerShell script and you can call that HTTP endpoint in HTTP Request action of the workflow. Once this step is completed, you can link it with the Send Email action of the workflow to send an email.

[Anshu_Kunal]

Use AD native rules like aftercreate or aftermodify ps scripts to achieve this use case.

Aftercreate Rule and Powershell script to generate password and send email to user's manager

Hi Everyone, I’m trying to create an aftercreate rule for an AD source in IDN, I will copy the rule and powershell script I have built so far, but I see an error in IQservices powershell script like follows: Error: Item = → Message = Exception calling “.ctor” with “1” argument(s): “Data at the root level is invalid. Line 1, position 1.” Anyone ran into this issue? TIA Also if you could post the working rule and powershell script, would really appreiate it. Thanks. Powershell Script: #####…

Via workflow check below feature of ISC

New Capability: PowerShell Script Execution in Workflows

Description With approximately 60–70% of administrators proficient in PowerShell compared to other scripting languages (such as Bash), our Professional Services team identified that focusing on PowerShell execution would deliver the highest value to customers. This capability helps organizations reduce their privileged access footprint and provides valuable functionality for our Professional and Expert Services teams during implementation projects. This release introduces the new PowerShell Scr…

[msingh900 (Manish Singh)]

Hi @Anshu_Kunal

Do you have any idea how soon this Action is available. As I cannot see this Action of triggering powershell execution in ISC.

Thanks

[Anshu_Kunal]

You need to setup a new VA cluster for this to be enabled.

Enabling Privileged Action Gateway

Hi Experts, We would need to create a new VA cluster with PAG enabled in order to create security groups in AD. As per the official documentation, we need to configure a new cluster and select “PAG” and create a new VA there. However, I also read the following in the VA Troubleshooting Guide: sudo systemctl pag start: Enables Privileged Task Automation actions that run against target systems and applications. Link: https://community.sailpoint.com/t5/IdentityNow-Connectors/Virtual-Appliance-Tr…

Deploying Virtual Appliances - SailPoint Identity Services

[JagadeshMuchumarri]

Thanks for providing details. Do we need to have 2 new VA instances, or one VA instance is enough?
If we have only one VA instance in our environment, can we deploy new VA instance and decommission the old VA instance?

[Anshu_Kunal]

I think one VA should be fine, since PAG is enabled on VA cluster level.