How to tackle a failed native change detection workflow?

Lifecycle & Governance
, ,
1

Hello All,

We have a workflow to revoke unwanted accesses which gets detected via Native Change Detection, once the workflow gets launched the snapshot gets removed from debug page of the identity which will not allow us to retrigger the workflow.

In cases of workflow provisioning failure, how do we tackle ( considering the snapshot getting removed )?

Please share your experiences based on project implementation. One custom solution I can think of is tracking such failures via audit events and running a scheduled task to grab such → create a provisioning plan and retry those.

@Bernie any inputs based on your experience. Apologies to copy you as none has responded. :disappointed_face:

Thanks and regards

2

I’m not sure how your workflow is configured. Is the “enableRetryRequest” variable enabled?  Was optimistic provisioning enabled?

3

Hello. Thank you! I received a feedback from Menno on the wiki page:

https://community.sailpoint.com/t5/IdentityIQ-Articles/Native-Change-Detection/ta-p/72848/page/2/show-comments/true

and also kept the provisioning retry variable in the workflow to solve the above.