Workflow triggering twice in identitynow

Identity Security Cloud (ISC) ISC Discussion and Questions
, , , , , , , , ,
1

Hi Team ,

I have created a workflow where a user can only have one access profile at a time and if he request for another entitlement , previous access profile should be removed.

Now when I am creating approval request for someone to get this access profile .

Workflow is getting triggered only once but there are multiple events getting triggered

1 event : user is getting provisioned to the access profile
2nd event. (automatically triggered in sailpoint [under workflow owner]
to remove the requested access profile .

I am not able to figure out why the second event is triggering automatically and removing the group provisioned after approval, which should not happen .

Could you guys please help me
IF you see in Pic 4 , I have only triggered “MODIFY ACCOUNT PASSED” but upper 3 are automatically triggered .

Please find the attached screenshot of workflows.

PIC 1
PIC 11592×788 49 KB

PIC 2
PIC 21592×813 42.6 KB

PIC 3
PIC 31595×828 37.4 KB

PIC 4
PIC 41177×262 24.8 KB

2

Hi @sethi_shivam ,

Welcome to the Sailpoint developer community !

What type of trigger do you use ?

If you revoke via access request endpoint from your current running worflow that can trigge again the same workflow.

3

Hi @baoussounda if you see pic 2nd , there i have used filter , getAccess.AccessItems.

Do you think this is the root cause .

If yes than is there any alternate approach for this?

And really thanks for helping out

4

Hi @sethi_shivam,

You can test your filter here for see if it’s work for add and remove operation : https://www.javainuse.com/jsonpath

5

My filter is working … but the task is getting triggered twice , due to which it is also removing the entitlement I am assigning to the user

6

Trigger is always based on event. If your workflow trigger twice that mean the event is occured twice

7

Do you have approval on removable option in your access profile ?

8

No , that option is not enabled . but if I enable it , wouldn’t it again require the approval to remove previous (old entitlement) because ideally there should be only 1 entitlement at a time.

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.