# Lifecycle & Governance **URL:** https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md [Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md) --- ## [Start here for Lifecycle & Governance](https://community.sailpoint.com/discuss/t/start-here-for-lifecycle-governance/14)
**Author:** [@darylclaude\_medina](https://community.sailpoint.com/discuss/u/darylclaude_medina)\ **Replies:** 0\ **Last updated:** [July 20, 2026, 10:03am UTC](https://community.sailpoint.com/discuss/t/start-here-for-lifecycle-governance/14 "2026-07-20T10:03:25Z")
Automate processes, manage lifecycles, and govern with confidence. Focused on the core mechanics of identity governance. Join discussions on orchestrating Joiner-Mover-Leaver (JML) processes, building efficient workflow… --- ## [In case you missed it: What's new in MySailPoint, approvals, and notifications](https://community.sailpoint.com/discuss/t/in-case-you-missed-it-whats-new-in-mysailpoint-approvals-and-notifications/59716)
**Author:** [@darylclaude\_medina](https://community.sailpoint.com/discuss/u/darylclaude_medina)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 8:10pm UTC](https://community.sailpoint.com/discuss/t/in-case-you-missed-it-whats-new-in-mysailpoint-approvals-and-notifications/59716 "2026-10-22T20:10:43Z")
Missed our recent webinar or want to revisit the highlights? We’ve got you covered! :backhand\_index\_pointing\_down: SailPoint Senior Product Manager Tyler Harman walked through recent enhancements to Identity Security Cl… --- ## [New reimagined Certifications](https://community.sailpoint.com/discuss/t/new-reimagined-certifications/59699)
**Author:** [@kenmadden](https://community.sailpoint.com/discuss/u/kenmadden)\ **Replies:** 2\ **Last updated:** [October 15, 2026, 12:21pm UTC](https://community.sailpoint.com/discuss/t/new-reimagined-certifications/59699 "2026-10-15T12:21:43Z")
1. What are you building or asking about? Recently there was an announcement that there will be a new re-imagining of the Certification module. What version of the platform will this be available for? On Prem, Cloud, 8.… --- ## [Mitigate effects of attribute value changes in HRMS on birthright Role criteria](https://community.sailpoint.com/discuss/t/mitigate-effects-of-attribute-value-changes-in-hrms-on-birthright-role-criteria/59692)
**Author:** [@woodwardcoreyn](https://community.sailpoint.com/discuss/u/woodwardcoreyn)\ **Replies:** 3\ **Last updated:** [October 13, 2026, 5:10pm UTC](https://community.sailpoint.com/discuss/t/mitigate-effects-of-attribute-value-changes-in-hrms-on-birthright-role-criteria/59692 "2026-10-13T17:10:34Z")
1. What process or policy are you working on? Creating birthright roles granular enough for business use-cases while avoiding consequences of attribute value changes from our HRMS. 2. What is your question or current ch… --- ## [Certification Event Identity Trigger owner change](https://community.sailpoint.com/discuss/t/certification-event-identity-trigger-owner-change/59686)
**Author:** [@prahantMishra](https://community.sailpoint.com/discuss/u/prahantMishra)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 8:43am UTC](https://community.sailpoint.com/discuss/t/certification-event-identity-trigger-owner-change/59686 "2026-10-06T08:43:11Z")
1. What process or policy are you working on? Identity owner change certification event 2. What is your question or current challenge? I need to create an identity certification campaign for change owners, ensuring that… --- ## [In case you missed it - Sneak Peek at the latest Certifications enhancements](https://community.sailpoint.com/discuss/t/in-case-you-missed-it-sneak-peek-at-the-latest-certifications-enhancements/59684)
**Author:** [@amy\_shillinglaw](https://community.sailpoint.com/discuss/u/amy_shillinglaw)\ **Replies:** 1\ **Last updated:** [October 9, 2026, 8:12pm UTC](https://community.sailpoint.com/discuss/t/in-case-you-missed-it-sneak-peek-at-the-latest-certifications-enhancements/59684 "2026-10-09T20:12:20Z")
1. What process or policy are you working on? Hi everyone, Welcome to the new community experience! To kick off this category, I wanted to let you know that the Community recently hosted a webinar on the Certifications … --- ## [Trigger x De-provisioning](https://community.sailpoint.com/discuss/t/trigger-x-de-provisioning/59522)
**Author:** [@hlouback](https://community.sailpoint.com/discuss/u/hlouback)\ **Replies:** 2\ **Last updated:** [July 1, 2026, 3:05pm UTC](https://community.sailpoint.com/discuss/t/trigger-x-de-provisioning/59522 "2026-07-01T15:05:09Z")
Hi team, there is an internal discussion regarding Trigger x de-provisioning process. Is the trigger part of de-provision process? I don´t think so, it looks like to be the start, but not execution itself. Thought? --- ## [Provisioning Plan Execution Order – Modify + Delete for Same Account](https://community.sailpoint.com/discuss/t/provisioning-plan-execution-order-modify-delete-for-same-account/59519)
**Author:** [@yedurureddy](https://community.sailpoint.com/discuss/u/yedurureddy)\ **Replies:** 7\ **Last updated:** [July 30, 2026, 1:53pm UTC](https://community.sailpoint.com/discuss/t/provisioning-plan-execution-order-modify-delete-for-same-account/59519 "2026-07-30T13:53:46Z")
Hi Team, I have a question regarding Provisioning Plan execution behavior in SailPoint IdentityIQ, specifically around multiple AccountRequest for the same account. Scenario In a Leaver use case, we are building a pro… --- ## [Mass forwarding](https://community.sailpoint.com/discuss/t/mass-forwarding/59514)
**Author:** [@DianaCamas](https://community.sailpoint.com/discuss/u/DianaCamas)\ **Replies:** 5\ **Last updated:** [July 3, 2026, 6:13pm UTC](https://community.sailpoint.com/discuss/t/mass-forwarding/59514 "2026-07-03T18:13:44Z")
Hello, I’m reaching out to ask for your help. Does anyone on the forum know if it’s possible to forward 700 forms and approvals from an application to a specific person using Sailpoint IdentityIQ? We’ve already tested … --- ## [\[NERM\] How to prevent running a workflow while having the same workflow Inprogress?](https://community.sailpoint.com/discuss/t/nerm-how-to-prevent-running-a-workflow-while-having-the-same-workflow-inprogress/59511)
**Author:** [@Halim36](https://community.sailpoint.com/discuss/u/Halim36)\ **Replies:** 2\ **Last updated:** [June 29, 2026, 5:05pm UTC](https://community.sailpoint.com/discuss/t/nerm-how-to-prevent-running-a-workflow-while-having-the-same-workflow-inprogress/59511 "2026-06-29T17:05:45Z")
How to prevent running a workflow while having the same workflow InProgress inside NERM? - Example: pending Approval I have external worker, there is a work assignment created for this worked and it is pending appr… --- ## [RequestHandler LCM](https://community.sailpoint.com/discuss/t/requesthandler-lcm/59481)
**Author:** [@BrianJ](https://community.sailpoint.com/discuss/u/BrianJ)\ **Replies:** 6\ **Last updated:** [June 29, 2026, 6:25pm UTC](https://community.sailpoint.com/discuss/t/requesthandler-lcm/59481 "2026-06-29T18:25:51Z")
Good afternoon community I’m facing off the next problem, when a user has a Leaver event from the authorative source IIQ launch a requestHandler to remove the application account’s, the issue I’m looking is in some cas… --- ## [Possible to assign a search based certification campaign to both managers and a governance group?](https://community.sailpoint.com/discuss/t/possible-to-assign-a-search-based-certification-campaign-to-both-managers-and-a-governance-group/59471)
**Author:** [@MichaelAAskins](https://community.sailpoint.com/discuss/u/MichaelAAskins)\ **Replies:** 7\ **Last updated:** [June 16, 2026, 3:52am UTC](https://community.sailpoint.com/discuss/t/possible-to-assign-a-search-based-certification-campaign-to-both-managers-and-a-governance-group/59471 "2026-06-16T03:52:25Z")
My client asked if a certification campaign can be assigned to both an identity’s manager, and also a governance group. Their reasoning is HR managers are aware of appropriate application access such as from SAP sources… --- ## [Seeking Best Practices for JML Lifecycle Implementation in SailPoint SaaS (ISC)](https://community.sailpoint.com/discuss/t/seeking-best-practices-for-jml-lifecycle-implementation-in-sailpoint-saas-isc/59455)
**Author:** [@amann](https://community.sailpoint.com/discuss/u/amann)\ **Replies:** 1\ **Last updated:** [June 8, 2026, 7:42pm UTC](https://community.sailpoint.com/discuss/t/seeking-best-practices-for-jml-lifecycle-implementation-in-sailpoint-saas-isc/59455 "2026-06-08T19:42:41Z")
Hi all, I hope you’re doing well. I’m currently exploring how to implement Joiner, Mover, and Leaver (JML) lifecycle processes in SailPoint Identity Security Cloud (SaaS/ISC) and was wondering if anyone could point me … --- ## [Data segmentation for Identities object](https://community.sailpoint.com/discuss/t/data-segmentation-for-identities-object/59452)
**Author:** [@vchutitaporn](https://community.sailpoint.com/discuss/u/vchutitaporn)\ **Replies:** 2\ **Last updated:** [August 10, 2026, 3:15pm UTC](https://community.sailpoint.com/discuss/t/data-segmentation-for-identities-object/59452 "2026-08-10T15:15:25Z")
I’m currently exploring the Data Segmentation feature. It appears to work well for restricting sub-administrators to view only a specific set of Roles and Entitlements. Can this feature also be used to limit visibility … --- ## [Form Cancellation Email Template ISC](https://community.sailpoint.com/discuss/t/form-cancellation-email-template-isc/59421)
**Author:** [@sandashafreen26](https://community.sailpoint.com/discuss/u/sandashafreen26)\ **Replies:** 6\ **Last updated:** [June 4, 2026, 9:05pm UTC](https://community.sailpoint.com/discuss/t/form-cancellation-email-template-isc/59421 "2026-06-04T21:05:04Z")
I have been working on form expiry. So once the form has expired, a cancellation email is triggered. I am unable to find this template in the OOTB Emails list, nor there is any option in the Workflow FORM action. How do … --- ## [Exchange Online mailbox conversion + delayed E5 license removal on termination/leave — best practice](https://community.sailpoint.com/discuss/t/exchange-online-mailbox-conversion-delayed-e5-license-removal-on-termination-leave-best-practice/59392)
**Author:** [@SreeshaC93](https://community.sailpoint.com/discuss/u/SreeshaC93)\ **Replies:** 2\ **Last updated:** [May 21, 2026, 9:29pm UTC](https://community.sailpoint.com/discuss/t/exchange-online-mailbox-conversion-delayed-e5-license-removal-on-termination-leave-best-practice/59392 "2026-05-21T21:29:57Z")
Hi all, Looking for guidance on a workflow involving Exchange Online and E5 license retention during termination and long-term leave. We use SailPoint Identity Security Cloud (ISC). Scenario: when an employee is termin… --- ## [Aggregate birthright roles before account creation](https://community.sailpoint.com/discuss/t/aggregate-birthright-roles-before-account-creation/59386)
**Author:** [@Chonsult](https://community.sailpoint.com/discuss/u/Chonsult)\ **Replies:** 3\ **Last updated:** [June 1, 2026, 8:54pm UTC](https://community.sailpoint.com/discuss/t/aggregate-birthright-roles-before-account-creation/59386 "2026-06-01T20:54:47Z")
Hello everyone, I have a new requirement and I would appreciate your feedback: The target application supports account creation with groups/roles included in the create request, but it does not support adding groups aft… --- ## [Native Change Detection for Re-Enabled AD Accounts](https://community.sailpoint.com/discuss/t/native-change-detection-for-re-enabled-ad-accounts/59375)
**Author:** [@mfarina](https://community.sailpoint.com/discuss/u/mfarina)\ **Replies:** 8\ **Last updated:** [May 12, 2026, 10:37pm UTC](https://community.sailpoint.com/discuss/t/native-change-detection-for-re-enabled-ad-accounts/59375 "2026-05-12T22:37:52Z")
I’ve been asked if I can set up native change detection to catch any AD accounts that have been re-enabled after termination. While I understand the process of enabling it and using the event trigger for it, I don’t hav… --- ## [How to exclude inactive accounts in Certification campaign (ISC)](https://community.sailpoint.com/discuss/t/how-to-exclude-inactive-accounts-in-certification-campaign-isc/59373)
**Author:** [@bpcheney](https://community.sailpoint.com/discuss/u/bpcheney)\ **Replies:** 4\ **Last updated:** [May 12, 2026, 7:44pm UTC](https://community.sailpoint.com/discuss/t/how-to-exclude-inactive-accounts-in-certification-campaign-isc/59373 "2026-05-12T19:44:50Z")
I have created an inclusion Campaign filter in the campaign builder UI of Sailpoint ISC. It is an inclusion filter because I only want to pull the access of specific Entitlements and Sources. That part works fine. I’m pu… --- ## [Need to certify "group" as a whole, not group members (not user identities) in IIQ](https://community.sailpoint.com/discuss/t/need-to-certify-group-as-a-whole-not-group-members-not-user-identities-in-iiq/59356)
**Author:** [@surbhivv](https://community.sailpoint.com/discuss/u/surbhivv)\ **Replies:** 3\ **Last updated:** [May 6, 2026, 6:28am UTC](https://community.sailpoint.com/discuss/t/need-to-certify-group-as-a-whole-not-group-members-not-user-identities-in-iiq/59356 "2026-05-06T06:28:05Z")
Hi, Based on one of the requirement, I need an option in SailPoint IIQ to certify “SG and DL” as a whole, not group members. Basically, the group owner should see “group names” of all the groups they own and certify tho… --- ## [Birthright access via role still appears for app approval in certifications](https://community.sailpoint.com/discuss/t/birthright-access-via-role-still-appears-for-app-approval-in-certifications/59349)
**Author:** [@SeanK-W](https://community.sailpoint.com/discuss/u/SeanK-W)\ **Replies:** 2\ **Last updated:** [May 5, 2026, 7:31pm UTC](https://community.sailpoint.com/discuss/t/birthright-access-via-role-still-appears-for-app-approval-in-certifications/59349 "2026-05-05T19:31:15Z")
Hi all, We are seeing unexpected behaviour during user access review certifications. Our design is: A role provides birthright access. That role assigns an Entra security group. The security group grants access to an… --- ## [How is access profile composition supposed to be reviewed?](https://community.sailpoint.com/discuss/t/how-is-access-profile-composition-supposed-to-be-reviewed/59342)
**Author:** [@pillar224](https://community.sailpoint.com/discuss/u/pillar224)\ **Replies:** 4\ **Last updated:** [May 8, 2026, 3:20pm UTC](https://community.sailpoint.com/discuss/t/how-is-access-profile-composition-supposed-to-be-reviewed/59342 "2026-05-08T15:20:17Z")
Our company is in the process of migrating to a RBAC model. This has drawn the attention of our auditors and regulators, rightly so, because it moves the bulk of the control from regular access item campaign to role comp… --- ## [update an AD attribute named "msExchHideFromAddressLists" during termination](https://community.sailpoint.com/discuss/t/update-an-ad-attribute-named-msexchhidefromaddresslists-during-termination/59325)
**Author:** [@maninderkaur\_co-op](https://community.sailpoint.com/discuss/u/maninderkaur_co-op)\ **Replies:** 1\ **Last updated:** [April 28, 2026, 6:29pm UTC](https://community.sailpoint.com/discuss/t/update-an-ad-attribute-named-msexchhidefromaddresslists-during-termination/59325 "2026-04-28T18:29:20Z")
Hello All, I am looking for the way to set an AD attribute msExchHideFromAddressLists is set to “true” during terminations. Currently, our Attribute Sync is failing when the Workflow disables the account first, because… --- ## [Adaptive Approvals workflow not honoring autoApprove=DIRECT setting](https://community.sailpoint.com/discuss/t/adaptive-approvals-workflow-not-honoring-autoapprove-direct-setting/59320)
**Author:** [@Rahul\_SP](https://community.sailpoint.com/discuss/u/Rahul_SP)\ **Replies:** 1\ **Last updated:** [April 24, 2026, 5:19pm UTC](https://community.sailpoint.com/discuss/t/adaptive-approvals-workflow-not-honoring-autoapprove-direct-setting/59320 "2026-04-24T17:19:58Z")
I am testing an adaptive approval workflow for a requestable access profile. I have a branching logic in the workflow, which, based on the employee type routes the request to either one or the other approval structure. O… --- ## [Error when deprovisioning Role](https://community.sailpoint.com/discuss/t/error-when-deprovisioning-role/59295)
**Author:** [@smergea](https://community.sailpoint.com/discuss/u/smergea)\ **Replies:** 3\ **Last updated:** [April 22, 2026, 6:52am UTC](https://community.sailpoint.com/discuss/t/error-when-deprovisioning-role/59295 "2026-04-22T06:52:12Z")
Hello, When we encountered this error for a Role de-assignment action in SailPoint, and the role (BS Role, therefore the Entitlement) could not be deprovision from the identity cube. An unexpected error occurred: Batch… --- ## [Send Email Action WYSIWYG not matching the sent email - Help](https://community.sailpoint.com/discuss/t/send-email-action-wysiwyg-not-matching-the-sent-email-help/59286)
**Author:** [@jbeeson](https://community.sailpoint.com/discuss/u/jbeeson)\ **Replies:** 1\ **Last updated:** [April 17, 2026, 4:35pm UTC](https://community.sailpoint.com/discuss/t/send-email-action-wysiwyg-not-matching-the-sent-email-help/59286 "2026-04-17T16:35:06Z")
Working on building out our New Hire Email in a workflow action and it is built and displayed correctly in the WYSIWYG editor, but when we send the email out it is wrong and the numbering is messed up and spacing is brok… --- ## [Creating a multi-source Certification Campaign (for SOX) in ISC](https://community.sailpoint.com/discuss/t/creating-a-multi-source-certification-campaign-for-sox-in-isc/59282)
**Author:** [@bpcheney](https://community.sailpoint.com/discuss/u/bpcheney)\ **Replies:** 6\ **Last updated:** [April 23, 2026, 6:41pm UTC](https://community.sailpoint.com/discuss/t/creating-a-multi-source-certification-campaign-for-sox-in-isc/59282 "2026-04-23T18:41:17Z")
I’m trying to create a combined certification campaign of all of our SOX scope sources/applications. Instead of doing a specific smaller campaign for each source individually, I wanted to combine it into one. I’ve seen… --- ## [Create Targeted Certification Template](https://community.sailpoint.com/discuss/t/create-targeted-certification-template/59264)
**Author:** [@smergea](https://community.sailpoint.com/discuss/u/smergea)\ **Replies:** 2\ **Last updated:** [April 13, 2026, 11:02am UTC](https://community.sailpoint.com/discuss/t/create-targeted-certification-template/59264 "2026-04-13T11:02:50Z")
Hello, How can I create a Targeted Certification template in IdentityIQ that I can later call from a workflow? I want to define the certification settings once (certifiers, duration, sign off, etc.) without scheduling … --- ## [SAP HANA entitlement removal](https://community.sailpoint.com/discuss/t/sap-hana-entitlement-removal/59255)
**Author:** [@Amsingh1](https://community.sailpoint.com/discuss/u/Amsingh1)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 1:14pm UTC](https://community.sailpoint.com/discuss/t/sap-hana-entitlement-removal/59255 "2026-04-09T13:14:53Z")
Hi Folks, Currently in HANA there are two entitlementtypes CATALOG\_ROLES and REPOSITORY\_ROLES. So in lifecycle state terminatedplus7 we remove the entitlements using SSBPR. Currently what we are observing is that the RE… --- ## [Hide specific users from access request page in ISC](https://community.sailpoint.com/discuss/t/hide-specific-users-from-access-request-page-in-isc/59252)
**Author:** [@sarthak\_chawla\_87](https://community.sailpoint.com/discuss/u/sarthak_chawla_87)\ **Replies:** 1\ **Last updated:** [April 8, 2026, 7:51pm UTC](https://community.sailpoint.com/discuss/t/hide-specific-users-from-access-request-page-in-isc/59252 "2026-04-08T19:51:50Z")
Hi, We are onboarding a couple of HR sources only for access review, no one should be able to request access for them Anyway to hide these users from access request? Any other solutions? Like auto rejection of the requ… [Next page](https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=1)