Hi everyone,
We are developing the reassignment object owners using IDN workflows. For this, we are following the steps of https://developer.sailpoint.com/discuss/t/reassign-object-owners-using-identitynow-workflows/22371, but we have an additional requirement from the client side, which is that we need to first check that the person leaving the company is the owner of a particular object before sending the form. The problem occurs in the workflows for identity profiles, governance groups and workflows because the API for retrieving any of these objects does not allow filtering by owner.
I have two scenarios in mind. Using the workflow to reassign identity profiles as an example, the first one is that inside the loop operator I check if the owner of the identity profile is the same as the person who is leaving, if so I check if we have the new owner to check if we have to send the form or not, but this doesn’t work because the loop works sequentially and if the person who is leaving owns two identity profiles he will get two forms. The second scenario is to define a variable and in a previous loop, check if there is an identity profile where the owner is the person who is leaving and if so, update the variable so that when the loop ends check the value of the variable and if it has a value for example ‘yes’ then send the form and know the new owner before going through the second loop and updating the identity profiles that are necessary. The problem is that I have not been able to do this and I don’t know if it is possible to create a global variable, access it, update it inside the loop and finally access the value of the updated variable.
Do you see a possible solution? If so, could you give me an example? In the following screenshot you can see how I have coded the workflow.
Thanks in advance