# Lifecycle & Governance **URL:** https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=1 [Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md) **Page:** 2 --- ## [Create Event Triggered upon Identity Refresh for existing Account](https://community.sailpoint.com/discuss/t/create-event-triggered-upon-identity-refresh-for-existing-account/59228)
**Author:** [@cbskiet1986](https://community.sailpoint.com/discuss/u/cbskiet1986)\ **Replies:** 1\ **Last updated:** [April 2, 2026, 9:49am UTC](https://community.sailpoint.com/discuss/t/create-event-triggered-upon-identity-refresh-for-existing-account/59228 "2026-04-02T09:49:49Z")
Hi Team, We have observed Create account event triggered on the each Identity refresh task for existing accounts for most of the application in SailPoint IIQ 8.3. Could you please suggest if any configuration change re… --- ## [Reducing "Committed" Status Requests – Verification Logic Adjustment](https://community.sailpoint.com/discuss/t/reducing-committed-status-requests-verification-logic-adjustment/59214)
**Author:** [@gbessomba](https://community.sailpoint.com/discuss/u/gbessomba)\ **Replies:** 5\ **Last updated:** [April 1, 2026, 2:55pm UTC](https://community.sailpoint.com/discuss/t/reducing-committed-status-requests-verification-logic-adjustment/59214 "2026-04-01T14:55:41Z")
Context: Our client operates two separate SailPoint instances: Access Request Portal (handles user requests) Provisioning Instance (manages target systems: AD, LDAP, REST API-based connectors) Current Workflow: Use… --- ## [Multiple role assignment and question about how IIQ provisions/deprovisions related entitlements](https://community.sailpoint.com/discuss/t/multiple-role-assignment-and-question-about-how-iiq-provisions-deprovisions-related-entitlements/59204)
**Author:** [@kapelesw](https://community.sailpoint.com/discuss/u/kapelesw)\ **Replies:** 2\ **Last updated:** [April 1, 2026, 2:52pm UTC](https://community.sailpoint.com/discuss/t/multiple-role-assignment-and-question-about-how-iiq-provisions-deprovisions-related-entitlements/59204 "2026-04-01T14:52:37Z")
We are currently running IIQ 8.3p1. We have a case where \>1 role assigns the same entitlement to the user’s AD account. Example: Role 1 assigns group1, group2, group3 Role 2 assigns group 3, group 4, group5 Both rol… --- ## [\[8.4\]Approval Reminders Not Sending](https://community.sailpoint.com/discuss/t/8-4-approval-reminders-not-sending/59188)
**Author:** [@anching](https://community.sailpoint.com/discuss/u/anching)\ **Replies:** 4\ **Last updated:** [April 1, 2026, 2:51pm UTC](https://community.sailpoint.com/discuss/t/8-4-approval-reminders-not-sending/59188 "2026-04-01T14:51:43Z")
Hi all, I am inquiring about an issue where I am not seeing reminders for outstanding approval work items. When testing this issue, I submitted 4 access requests with me set at various levels of approval and left them op… --- ## [Best Practice for Automating Manager Reassignment for Contractors of Terminated Managers](https://community.sailpoint.com/discuss/t/best-practice-for-automating-manager-reassignment-for-contractors-of-terminated-managers/59183)
**Author:** [@sbanav01](https://community.sailpoint.com/discuss/u/sbanav01)\ **Replies:** 1\ **Last updated:** [March 17, 2026, 10:34pm UTC](https://community.sailpoint.com/discuss/t/best-practice-for-automating-manager-reassignment-for-contractors-of-terminated-managers/59183 "2026-03-17T22:34:47Z")
Business Scenario: We manage a significant number of contractors within ISC. When a manager of these contractors is terminated or goes on a long-term leave of absence, their user account’s Lifecycle State is updated ac… --- ## [Change in attribute at ISC from authoritative source](https://community.sailpoint.com/discuss/t/change-in-attribute-at-isc-from-authoritative-source/59132)
**Author:** [@SreeshaC93](https://community.sailpoint.com/discuss/u/SreeshaC93)\ **Replies:** 2\ **Last updated:** [May 15, 2026, 3:44pm UTC](https://community.sailpoint.com/discuss/t/change-in-attribute-at-isc-from-authoritative-source/59132 "2026-05-15T15:44:23Z")
Hi everyone, I’m working on a requirement where I need to identify the exact date a specific identity attribute was updated in Identity Security Cloud (ISC). For example, HR updates an employee’s Termination Date attri… --- ## [How can we reset Active Directory account password via HelpDesk user in ISC](https://community.sailpoint.com/discuss/t/how-can-we-reset-active-directory-account-password-via-helpdesk-user-in-isc/59118)
**Author:** [@BhawnaAgrawal](https://community.sailpoint.com/discuss/u/BhawnaAgrawal)\ **Replies:** 1\ **Last updated:** [March 2, 2026, 4:09pm UTC](https://community.sailpoint.com/discuss/t/how-can-we-reset-active-directory-account-password-via-helpdesk-user-in-isc/59118 "2026-03-02T16:09:12Z")
Can someone confirm me if how can we reset Active Directory account password via Help Desk user in ISC. --- ## [JDBC + AD Source Integration — Syncing AD Group Membership with JDBC Entitlements](https://community.sailpoint.com/discuss/t/jdbc-ad-source-integration-syncing-ad-group-membership-with-jdbc-entitlements/59100)
**Author:** [@madhukumar](https://community.sailpoint.com/discuss/u/madhukumar)\ **Replies:** 1\ **Last updated:** [February 25, 2026, 3:39pm UTC](https://community.sailpoint.com/discuss/t/jdbc-ad-source-integration-syncing-ad-group-membership-with-jdbc-entitlements/59100 "2026-02-25T15:39:11Z")
I am working on a SailPoint ISC implementation with two sources: Active Directory - users and their AD group membershipsJDBC SQL Server - a custom application with its own user and role tables The JDBC app has the foll… --- ## [identity lifecycle state change to inactive for a large list of identities](https://community.sailpoint.com/discuss/t/identity-lifecycle-state-change-to-inactive-for-a-large-list-of-identities/59092)
**Author:** [@U1268702](https://community.sailpoint.com/discuss/u/U1268702)\ **Replies:** 3\ **Last updated:** [March 30, 2026, 12:06am UTC](https://community.sailpoint.com/discuss/t/identity-lifecycle-state-change-to-inactive-for-a-large-list-of-identities/59092 "2026-03-30T00:06:40Z")
¿Is there a way to perform a bulk identity lifecycle state change to inactive for a large list of identities? I have a CSV file with a list of identities and need to change their lifecycle state to inactive. Is it possi… --- ## [Issue with Endless Escalation Loop in Detective SOD Policy Workflow](https://community.sailpoint.com/discuss/t/issue-with-endless-escalation-loop-in-detective-sod-policy-workflow/59063)
**Author:** [@harishabn](https://community.sailpoint.com/discuss/u/harishabn)\ **Replies:** 1\ **Last updated:** [February 18, 2026, 3:12pm UTC](https://community.sailpoint.com/discuss/t/issue-with-endless-escalation-loop-in-detective-sod-policy-workflow/59063 "2026-02-18T15:12:07Z")
We have a requirement related to Detective-type SOD violations. Currently, the manager is defined as the policy violation owner. When a violation is detected during the Identity Refresh task, a work item is generated an… --- ## [Migrating Identities from One existing authoritative Source to another authoritative Source](https://community.sailpoint.com/discuss/t/migrating-identities-from-one-existing-authoritative-source-to-another-authoritative-source/59061)
**Author:** [@ankit25987](https://community.sailpoint.com/discuss/u/ankit25987)\ **Replies:** 1\ **Last updated:** [February 19, 2026, 4:47pm UTC](https://community.sailpoint.com/discuss/t/migrating-identities-from-one-existing-authoritative-source-to-another-authoritative-source/59061 "2026-02-19T16:47:24Z")
Hi Team, Sources: ACT(Clarizen) Workday We have two sources of identities for contractor where we need to migrate identities from Source Act to workday, both these are existing sources where identity profile for Work… --- ## [SailPoint AD — How to create a second account in the same Source with a different suffix from an ITS](https://community.sailpoint.com/discuss/t/sailpoint-ad-how-to-create-a-second-account-in-the-same-source-with-a-different-suffix-from-an-its/59045)
**Author:** [@henriqueoliveira2026](https://community.sailpoint.com/discuss/u/henriqueoliveira2026)\ **Replies:** 2\ **Last updated:** [February 19, 2026, 10:46pm UTC](https://community.sailpoint.com/discuss/t/sailpoint-ad-how-to-create-a-second-account-in-the-same-source-with-a-different-suffix-from-an-its/59045 "2026-02-19T22:46:45Z")
Hi everyone, good morning! I have an implementation question about SailPoint ISC with Active Directory integrated with an ITSM tool. Scenario: I have a single AD Source governing accounts. When an ITSM request comes … --- ## [Unable to retrieve automatically closed certification tasks via API](https://community.sailpoint.com/discuss/t/unable-to-retrieve-automatically-closed-certification-tasks-via-api/58974)
**Author:** [@kotak\_Chandni](https://community.sailpoint.com/discuss/u/kotak_Chandni)\ **Replies:** 3\ **Last updated:** [January 23, 2026, 8:56pm UTC](https://community.sailpoint.com/discuss/t/unable-to-retrieve-automatically-closed-certification-tasks-via-api/58974 "2026-01-23T20:56:52Z")
When we perform certification-related actions in SailPoint (such as reassigning an admin or deleting a certification campaign), SailPoint creates a background certification task. To view these tasks, SailPoint provides … --- ## [Find Pendings Lifecycle Events](https://community.sailpoint.com/discuss/t/find-pendings-lifecycle-events/58970)
**Author:** [@smergea](https://community.sailpoint.com/discuss/u/smergea)\ **Replies:** 5\ **Last updated:** [February 12, 2026, 10:59am UTC](https://community.sailpoint.com/discuss/t/find-pendings-lifecycle-events/58970 "2026-02-12T10:59:18Z")
Hello, I understand that SailPoint process events based on snapshots. For example, if a Leaver is triggered based on Inactive attribute changed, can those pending events be found based on comparison between Identiy cub… --- ## [Outliers certification / How to certify only rare entitlements?](https://community.sailpoint.com/discuss/t/outliers-certification-how-to-certify-only-rare-entitlements/58969)
**Author:** [@brri](https://community.sailpoint.com/discuss/u/brri)\ **Replies:** 3\ **Last updated:** [January 21, 2026, 8:00pm UTC](https://community.sailpoint.com/discuss/t/outliers-certification-how-to-certify-only-rare-entitlements/58969 "2026-01-21T20:00:44Z")
Hi there, I was wondering if it is possible to create a certification campaign from the Outliers view but only for rare entitlements. I tired to create a certification campaign, but it forces the manager to certify all… --- ## [Managing Access Profiles with overlapping entitlements](https://community.sailpoint.com/discuss/t/managing-access-profiles-with-overlapping-entitlements/58963)
**Author:** [@bozhidarkostov](https://community.sailpoint.com/discuss/u/bozhidarkostov)\ **Replies:** 7\ **Last updated:** [January 27, 2026, 2:50pm UTC](https://community.sailpoint.com/discuss/t/managing-access-profiles-with-overlapping-entitlements/58963 "2026-01-27T14:50:48Z")
Hi all, we are facing challenges to design proper management for onboarded systems where in the Access Profiles there are overlapping entitlements, in the screenshots below is the issue we face upon revocation of an Acc… --- ## [Need to create Role in Non Employee Risk Management using workflow](https://community.sailpoint.com/discuss/t/need-to-create-role-in-non-employee-risk-management-using-workflow/58888)
**Author:** [@devanga](https://community.sailpoint.com/discuss/u/devanga)\ **Replies:** 1\ **Last updated:** [December 23, 2025, 1:48pm UTC](https://community.sailpoint.com/discuss/t/need-to-create-role-in-non-employee-risk-management-using-workflow/58888 "2025-12-23T13:48:57Z")
I have a requirement where i am trying to create a role using workflow in Non-Employee Risk Management but the workflow giving error REST API Action failure: HTTP Status: 400 - Bad Request i am using the below configurat… --- ## [Create additional AD account](https://community.sailpoint.com/discuss/t/create-additional-ad-account/37122)
**Author:** [@Lukkah](https://community.sailpoint.com/discuss/u/Lukkah)\ **Replies:** 2\ **Last updated:** [December 10, 2025, 8:49am UTC](https://community.sailpoint.com/discuss/t/create-additional-ad-account/37122 "2025-12-10T08:49:29Z")
sailpoint iiq 8.4 How do I create a new active directory account(SA) if the identity has a specific role even if the identitycube already has an existing AD link? The SA account will be created on a specific SA OU. So t… --- ## [FAM || Notification Issue for Access Approval – Request for Further Configuration Check](https://community.sailpoint.com/discuss/t/fam-notification-issue-for-access-approval-request-for-further-configuration-check/37074)
**Author:** [@suraj\_kalamkar](https://community.sailpoint.com/discuss/u/suraj_kalamkar)\ **Replies:** 1\ **Last updated:** [November 21, 2025, 3:11pm UTC](https://community.sailpoint.com/discuss/t/fam-notification-issue-for-access-approval-request-for-further-configuration-check/37074 "2025-11-21T15:11:45Z")
Hi Team, When users raise an access request, their managers or owners are not receiving the approval notification emails. We have reviewed and verified that all existing configurations appear to be correctly set up. We… --- ## [How do Sailpoint handle the termination of Workday Rescinding Hires](https://community.sailpoint.com/discuss/t/how-do-sailpoint-handle-the-termination-of-workday-rescinding-hires/37024)
**Author:** [@vsekar7](https://community.sailpoint.com/discuss/u/vsekar7)\ **Replies:** 4\ **Last updated:** [November 11, 2025, 2:56pm UTC](https://community.sailpoint.com/discuss/t/how-do-sailpoint-handle-the-termination-of-workday-rescinding-hires/37024 "2025-11-11T14:56:35Z")
How do Sailpoint handle the termination of Workday Rescinding Hires I have tried to add new account schemas as mentioned in the below document and getting the below error in account aggregation task: Rescinded and Corr… --- ## [Notify When LCS Changes from OnLeave to Active](https://community.sailpoint.com/discuss/t/notify-when-lcs-changes-from-onleave-to-active/36973)
**Author:** [@sivakumarnallu](https://community.sailpoint.com/discuss/u/sivakumarnallu)\ **Replies:** 2\ **Last updated:** [October 29, 2025, 4:24pm UTC](https://community.sailpoint.com/discuss/t/notify-when-lcs-changes-from-onleave-to-active/36973 "2025-10-29T16:24:27Z")
I need assistance in creating a workflow that triggers when the Lifecycle State (LCS) changes from OnLeave to Active. The query I’m using works correctly, but I want the workflow to send an email immediately upon the st… --- ## [Custom email notification for SODs - ISC](https://community.sailpoint.com/discuss/t/custom-email-notification-for-sods-isc/36814)
**Author:** [@amar\_simha](https://community.sailpoint.com/discuss/u/amar_simha)\ **Replies:** 4\ **Last updated:** [September 24, 2025, 2:50pm UTC](https://community.sailpoint.com/discuss/t/custom-email-notification-for-sods-isc/36814 "2025-09-24T14:50:54Z")
Hi Team, We have SOD policies configured to handle violations for set of entitlements. As per the product behavior SOD only evaluates on existing access and not when the request is submitted for the first time or reques… --- ## [ISC : Entitlement Owner Review in Sailpoint IdentityNow](https://community.sailpoint.com/discuss/t/isc-entitlement-owner-review-in-sailpoint-identitynow/36784)
**Author:** [@AnkitaTanwar](https://community.sailpoint.com/discuss/u/AnkitaTanwar)\ **Replies:** 5\ **Last updated:** [September 22, 2025, 8:01am UTC](https://community.sailpoint.com/discuss/t/isc-entitlement-owner-review-in-sailpoint-identitynow/36784 "2025-09-22T08:01:44Z")
Hi, Trying to create a certification campaign for Entitlement Review with Entitlement Owner as reviewer. Is there a way we can make Entitlement Owner as reviewer of certificate in IdentityNow? Thanks, Ankita. --- ## [ISC Workflow Action "Get Identity List" output to email](https://community.sailpoint.com/discuss/t/isc-workflow-action-get-identity-list-output-to-email/36783)
**Author:** [@nmadaname](https://community.sailpoint.com/discuss/u/nmadaname)\ **Replies:** 1\ **Last updated:** [September 18, 2025, 7:06am UTC](https://community.sailpoint.com/discuss/t/isc-workflow-action-get-identity-list-output-to-email/36783 "2025-09-18T07:06:34Z")
1) I am looking to do get an email whenever a user gets added into an AD group or the user gets removed from that AD group. 2) I am looking to build a workflow which gets the identity list based on a search query and se… --- ## [Multi-requestable roles](https://community.sailpoint.com/discuss/t/multi-requestable-roles/36779)
**Author:** [@sharaths10](https://community.sailpoint.com/discuss/u/sharaths10)\ **Replies:** 5\ **Last updated:** [October 15, 2025, 6:42am UTC](https://community.sailpoint.com/discuss/t/multi-requestable-roles/36779 "2025-10-15T06:42:31Z")
Hi, I want to request a role for an application in IIQ for account creation. This role would be used multiple times for account creation operation by the user for same application. This is coz the application does not s… --- ## [Workflow not returning true response in compare strings operator](https://community.sailpoint.com/discuss/t/workflow-not-returning-true-response-in-compare-strings-operator/36617)
**Author:** [@Menzowskii](https://community.sailpoint.com/discuss/u/Menzowskii)\ **Replies:** 2\ **Last updated:** [August 13, 2025, 12:03pm UTC](https://community.sailpoint.com/discuss/t/workflow-not-returning-true-response-in-compare-strings-operator/36617 "2025-08-13T12:03:00Z")
Hi, I’m exploring a workflow use case and would appreciate some guidance or confirmation on its feasibility within Identity Security Cloud. We’d like to create a workflow that is triggered when a user is identified as … --- ## [SoD Campaign Reviews not working in ISC like IIQ - has someone found a way ?](https://community.sailpoint.com/discuss/t/sod-campaign-reviews-not-working-in-isc-like-iiq-has-someone-found-a-way/36612)
**Author:** [@fas702-fs](https://community.sailpoint.com/discuss/u/fas702-fs)\ **Replies:** 4\ **Last updated:** [August 8, 2025, 4:39pm UTC](https://community.sailpoint.com/discuss/t/sod-campaign-reviews-not-working-in-isc-like-iiq-has-someone-found-a-way/36612 "2025-08-08T16:39:12Z")
Hi, any help would be appreciated. we have a requirement to implement SoD policies in Identity Now or ISC as part of campaign reviews. But I’m not sure how this is feasible in a reasonable manner to a business user who… --- ## [Adding a filter condtion for a specfic source for Native Change Detection WorkFlow.](https://community.sailpoint.com/discuss/t/adding-a-filter-condtion-for-a-specfic-source-for-native-change-detection-workflow/36603)
**Author:** [@apparassuresh](https://community.sailpoint.com/discuss/u/apparassuresh)\ **Replies:** 2\ **Last updated:** [August 6, 2025, 1:56pm UTC](https://community.sailpoint.com/discuss/t/adding-a-filter-condtion-for-a-specfic-source-for-native-change-detection-workflow/36603 "2025-08-06T13:56:26Z")
Hello, I hope this message finds you well. I am reaching out to discuss a requirement we have for native change detection. We are currently using a workflow trigger to detect native changes for an entitlement, and I wan… --- ## [Attribute Sync for Boolean account attribute (SalesForce IsActive)](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582)
**Author:** [@imckenzie](https://community.sailpoint.com/discuss/u/imckenzie)\ **Replies:** 2\ **Last updated:** [August 5, 2025, 3:32pm UTC](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582 "2025-08-05T15:32:56Z")
Hi, I’m attempting to Attribute Sync an identity attribute to the SalesForce SaaS connector account attribute “IsActive”. The account attribute comes OOB as “BOOLEAN”. Identity attribute config (I was able to make a PUT… --- ## [Entitlement Owner Approval getting cancelled after first Ent approver approves it](https://community.sailpoint.com/discuss/t/entitlement-owner-approval-getting-cancelled-after-first-ent-approver-approves-it/36521)
**Author:** [@pvnkamesh](https://community.sailpoint.com/discuss/u/pvnkamesh)\ **Replies:** 3\ **Last updated:** [December 4, 2025, 3:30pm UTC](https://community.sailpoint.com/discuss/t/entitlement-owner-approval-getting-cancelled-after-first-ent-approver-approves-it/36521 "2025-12-04T15:30:00Z")
Application Entitlement First Level Approver - Manager Second Level Approver - Ent Owner App-A Ent-1 Manager-1 Ent Owner -1 App-A Ent-2 Manager-1 Ent Owner -2 I am requesting two entitlements belonging to … [Previous page](https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md) [Next page](https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=2)