# \#provisioning **URL:** https://community.sailpoint.com/discuss/tag/provisioning/80.md [Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md) --- ## [Provisioning Plan Execution Order – Modify + Delete for Same Account](https://community.sailpoint.com/discuss/t/provisioning-plan-execution-order-modify-delete-for-same-account/59519)
**Author:** [@yedurureddy](https://community.sailpoint.com/discuss/u/yedurureddy)\ **Replies:** 7\ **Last updated:** [July 30, 2026, 1:53pm UTC](https://community.sailpoint.com/discuss/t/provisioning-plan-execution-order-modify-delete-for-same-account/59519 "2026-07-30T13:53:46Z")
Hi Team, I have a question regarding Provisioning Plan execution behavior in SailPoint IdentityIQ, specifically around multiple AccountRequest for the same account. Scenario In a Leaver use case, we are building a pro… --- ## [Aggregate birthright roles before account creation](https://community.sailpoint.com/discuss/t/aggregate-birthright-roles-before-account-creation/59386)
**Author:** [@Chonsult](https://community.sailpoint.com/discuss/u/Chonsult)\ **Replies:** 3\ **Last updated:** [June 1, 2026, 8:54pm UTC](https://community.sailpoint.com/discuss/t/aggregate-birthright-roles-before-account-creation/59386 "2026-06-01T20:54:47Z")
Hello everyone, I have a new requirement and I would appreciate your feedback: The target application supports account creation with groups/roles included in the create request, but it does not support adding groups aft… --- ## [How to pass multiple value for member of as part of Active Directory Create Account](https://community.sailpoint.com/discuss/t/how-to-pass-multiple-value-for-member-of-as-part-of-active-directory-create-account/59331)
**Author:** [@PushparajBendigoBank](https://community.sailpoint.com/discuss/u/PushparajBendigoBank)\ **Replies:** 1\ **Last updated:** [April 29, 2026, 4:57am UTC](https://community.sailpoint.com/discuss/t/how-to-pass-multiple-value-for-member-of-as-part-of-active-directory-create-account/59331 "2026-04-29T04:57:09Z")
Hello There, I have an Active Directory source in SailPoint ISC and I am passing static value for memberOf attribute, so that a group will be provisioned every time a new user account is created. It is working fine for… --- ## [Find Pendings Lifecycle Events](https://community.sailpoint.com/discuss/t/find-pendings-lifecycle-events/58970)
**Author:** [@smergea](https://community.sailpoint.com/discuss/u/smergea)\ **Replies:** 5\ **Last updated:** [February 12, 2026, 10:59am UTC](https://community.sailpoint.com/discuss/t/find-pendings-lifecycle-events/58970 "2026-02-12T10:59:18Z")
Hello, I understand that SailPoint process events based on snapshots. For example, if a Leaver is triggered based on Inactive attribute changed, can those pending events be found based on comparison between Identiy cub… --- ## [How can we delay next step in a rule?](https://community.sailpoint.com/discuss/t/how-can-we-delay-next-step-in-a-rule/32446)
**Author:** [@Div\_sec](https://community.sailpoint.com/discuss/u/Div_sec)\ **Replies:** 8\ **Last updated:** [December 19, 2025, 8:03pm UTC](https://community.sailpoint.com/discuss/t/how-can-we-delay-next-step-in-a-rule/32446 "2025-12-19T20:03:42Z")
Hi I am sending the initial AD credentials to manger via email through the after provisioning rule. But currently we need to delay the email notification by 1 hr as we need to wait for Azure AD sync and license provisio… --- ## [Single value attribute issue - SalesForce connector](https://community.sailpoint.com/discuss/t/single-value-attribute-issue-salesforce-connector/37017)
**Author:** [@lgcastro](https://community.sailpoint.com/discuss/u/lgcastro)\ **Replies:** 2\ **Last updated:** [December 10, 2025, 5:58pm UTC](https://community.sailpoint.com/discuss/t/single-value-attribute-issue-salesforce-connector/37017 "2025-12-10T17:58:01Z")
Hello, We’ve been having a problem with the SalesForce connector, specifically with the attribute ProfileId, of type group. It’s a single value attribute on the application side, and has been configured as such in the s… --- ## [Role provisioning error: InvocationTargetException](https://community.sailpoint.com/discuss/t/role-provisioning-error-invocationtargetexception/36960)
**Author:** [@pillar224](https://community.sailpoint.com/discuss/u/pillar224)\ **Replies:** 9\ **Last updated:** [October 28, 2025, 4:50pm UTC](https://community.sailpoint.com/discuss/t/role-provisioning-error-invocationtargetexception/36960 "2025-10-28T16:50:28Z")
Hi all, I opened a support case for this, but unfortunately, they wouldn’t help me because they said this was a new implementation (even though it’s not) so I’m hoping I might be able to find some help here. I am build… --- ## [Provisioning Plan Remove Account Request](https://community.sailpoint.com/discuss/t/provisioning-plan-remove-account-request/29307)
**Author:** [@san1385](https://community.sailpoint.com/discuss/u/san1385)\ **Replies:** 2\ **Last updated:** [August 20, 2025, 1:17pm UTC](https://community.sailpoint.com/discuss/t/provisioning-plan-remove-account-request/29307 "2025-08-20T13:17:58Z")
Hi, Can Someone help me with sample code, like how to remove Account Request from the below Provisioning Plan. \ \ \ \ \ **Author:** [@pritishmhrn](https://community.sailpoint.com/discuss/u/pritishmhrn)\ **Replies:** 2\ **Last updated:** [August 12, 2025, 7:46pm UTC](https://community.sailpoint.com/discuss/t/cyberark-pam-external-user-provisioning-error/31788 "2025-08-12T19:46:51Z") Hi All, We have a requirement to fetch the existing user from Okta Source of CyberArk and add them to local groups. We have added source & nativeIdentifier in Provisioning Form but getting the below error: java.io.IOE… --- ## [Attribute Sync for Boolean account attribute (SalesForce IsActive)](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582)
**Author:** [@imckenzie](https://community.sailpoint.com/discuss/u/imckenzie)\ **Replies:** 2\ **Last updated:** [August 5, 2025, 3:32pm UTC](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582 "2025-08-05T15:32:56Z")
Hi, I’m attempting to Attribute Sync an identity attribute to the SalesForce SaaS connector account attribute “IsActive”. The account attribute comes OOB as “BOOLEAN”. Identity attribute config (I was able to make a PUT… --- ## [Sunset on Certification Revoke Items](https://community.sailpoint.com/discuss/t/sunset-on-certification-revoke-items/25676)
**Author:** [@SReddy\_IAM](https://community.sailpoint.com/discuss/u/SReddy_IAM)\ **Replies:** 5\ **Last updated:** [June 27, 2025, 1:24am UTC](https://community.sailpoint.com/discuss/t/sunset-on-certification-revoke-items/25676 "2025-06-27T01:24:52Z")
Hi All, We have a requirement where when entitlements within a Cert are revoked and Cert has been signed off, they must be deprovisioned after 30 days. Is this possible? --- ## [Create Account Provisioning Policy for SAP Fieldglass](https://community.sailpoint.com/discuss/t/create-account-provisioning-policy-for-sap-fieldglass/36186)
**Author:** [@CeeJ](https://community.sailpoint.com/discuss/u/CeeJ)\ **Replies:** 3\ **Last updated:** [May 21, 2025, 7:13am UTC](https://community.sailpoint.com/discuss/t/create-account-provisioning-policy-for-sap-fieldglass/36186 "2025-05-21T07:13:41Z")
Hi Team, I’m working on SAP Fieldglass connector and I’m using the Create Account provisioning policy to populate attributes to push to Fieldglass. However, the values I’m going to use are not available in identity attr… --- ## [JDBC provisioning rule](https://community.sailpoint.com/discuss/t/jdbc-provisioning-rule/33981)
**Author:** [@JackSparrow](https://community.sailpoint.com/discuss/u/JackSparrow)\ **Replies:** 10\ **Last updated:** [April 18, 2025, 6:52pm UTC](https://community.sailpoint.com/discuss/t/jdbc-provisioning-rule/33981 "2025-04-18T18:52:24Z")
Hello everyone, For JDBC connector we are defining the provisioning policy to create new accounts. I can see in UI we have options to select values for attributes. So still do we need provisioning rule? If yes what code… --- ## [Customizing Manage Access panel in IIQ 8.4](https://community.sailpoint.com/discuss/t/customizing-manage-access-panel-in-iiq-8-4/35511)
**Author:** [@tbp\_fsk](https://community.sailpoint.com/discuss/u/tbp_fsk)\ **Replies:** 3\ **Last updated:** [February 5, 2025, 12:27pm UTC](https://community.sailpoint.com/discuss/t/customizing-manage-access-panel-in-iiq-8-4/35511 "2025-02-05T12:27:16Z")
Hi all, Is it possible to change the appearance of the Manage Access panel? Personalize the search results, the appearance of the returned results, sew in a predefined filter that will display specific entitlement/role … --- ## [Exclude DUO Enrollment mail step during DUO account creation](https://community.sailpoint.com/discuss/t/exclude-duo-enrollment-mail-step-during-duo-account-creation/32945)
**Author:** [@ratachari](https://community.sailpoint.com/discuss/u/ratachari)\ **Replies:** 3\ **Last updated:** [February 3, 2025, 6:03pm UTC](https://community.sailpoint.com/discuss/t/exclude-duo-enrollment-mail-step-during-duo-account-creation/32945 "2025-02-03T18:03:47Z")
The default DUO connector executes several steps during account creation including sending an enrollment mail to the user, adding the user to the requested DUO group, creating Phone, and associating it with the user. Ho… --- ## [Forcing users to complete the provisioning form now](https://community.sailpoint.com/discuss/t/forcing-users-to-complete-the-provisioning-form-now/35396)
**Author:** [@sofia\_sanjuan](https://community.sailpoint.com/discuss/u/sofia_sanjuan)\ **Replies:** 3\ **Last updated:** [January 23, 2025, 1:00pm UTC](https://community.sailpoint.com/discuss/t/forcing-users-to-complete-the-provisioning-form-now/35396 "2025-01-23T13:00:11Z")
I have business requirement to force the user to fill in the provisioning form right away, after submitting an access request. Is there a way to supress this dialog box from displaying to force the user to fill in the… --- ## [Change plan after identity initialization flow is called](https://community.sailpoint.com/discuss/t/change-plan-after-identity-initialization-flow-is-called/35333)
**Author:** [@Div\_sec](https://community.sailpoint.com/discuss/u/Div_sec)\ **Replies:** 6\ **Last updated:** [December 27, 2024, 7:34am UTC](https://community.sailpoint.com/discuss/t/change-plan-after-identity-initialization-flow-is-called/35333 "2024-12-27T07:34:14Z")
Hi I am presenting a form where I capture the required items from enduser, then need to sent the filled form for review for a reviewer who can update the values in the form , so I need to change the plan with respect to… --- ## [LCM Provisioning without identity request creation](https://community.sailpoint.com/discuss/t/lcm-provisioning-without-identity-request-creation/34959)
**Author:** [@ratachari](https://community.sailpoint.com/discuss/u/ratachari)\ **Replies:** 4\ **Last updated:** [October 28, 2024, 10:28am UTC](https://community.sailpoint.com/discuss/t/lcm-provisioning-without-identity-request-creation/34959 "2024-10-28T10:28:39Z")
Hello, I want to call LCM Provisioning workflow to execute my plan without any identity request created. Do we have any argument that needs to be updated within the workflow, so that SailPoint will just execute the plan… --- ## [What is available in the provisioning plan](https://community.sailpoint.com/discuss/t/what-is-available-in-the-provisioning-plan/34888)
**Author:** [@flegare](https://community.sailpoint.com/discuss/u/flegare)\ **Replies:** 4\ **Last updated:** [October 25, 2024, 10:33pm UTC](https://community.sailpoint.com/discuss/t/what-is-available-in-the-provisioning-plan/34888 "2024-10-25T22:33:15Z")
We are looking at Generic SDIM integration with ISC. The target ticketing system requires an identity identifier that is not available in the account definition. Would the identity attributes (say email address) be ava… --- ## [How to add Update Provisioning policy](https://community.sailpoint.com/discuss/t/how-to-add-update-provisioning-policy/34799)
**Author:** [@USHA\_RLA](https://community.sailpoint.com/discuss/u/USHA_RLA)\ **Replies:** 1\ **Last updated:** [October 3, 2024, 1:36pm UTC](https://community.sailpoint.com/discuss/t/how-to-add-update-provisioning-policy/34799 "2024-10-03T13:36:27Z")
Need to add one more provisioning policy for UPDATE usage type. I am able to add CREATE. While doing the same thing for UPDATE, I am getting below error { “locale”:“und”, “localeOrigin”:“REQUEST”, … --- ## [Request for Documentation on Auto-Provisioning New Users in SharePoint Online](https://community.sailpoint.com/discuss/t/request-for-documentation-on-auto-provisioning-new-users-in-sharepoint-online/34551)
**Author:** [@sivakumarnallu](https://community.sailpoint.com/discuss/u/sivakumarnallu)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 8:07pm UTC](https://community.sailpoint.com/discuss/t/request-for-documentation-on-auto-provisioning-new-users-in-sharepoint-online/34551 "2024-09-11T20:07:46Z")
I have successfully integrated the SharePoint Online source into IDN and aggregated users and entitlements. I am now looking for a document on how to provision new accounts to SharePoint Online. After the successful aggr… --- ## [Changing the approvalScheme based on the Requester Identity](https://community.sailpoint.com/discuss/t/changing-the-approvalscheme-based-on-the-requester-identity/34438)
**Author:** [@d\_pustovoitov](https://community.sailpoint.com/discuss/u/d_pustovoitov)\ **Replies:** 1\ **Last updated:** [August 19, 2024, 8:15am UTC](https://community.sailpoint.com/discuss/t/changing-the-approvalscheme-based-on-the-requester-identity/34438 "2024-08-19T08:15:04Z")
Hello everyone! Currently we have a requirement where for the Account Management (operations Enable/Disable/Delete) the users from one workgroups should be able to submit any of the operations without the approvals, but… --- ## [Key value pairs / objects in ISC](https://community.sailpoint.com/discuss/t/key-value-pairs-objects-in-isc/34440)
**Author:** [@vinayb08](https://community.sailpoint.com/discuss/u/vinayb08)\ **Replies:** 1\ **Last updated:** [August 15, 2024, 1:58pm UTC](https://community.sailpoint.com/discuss/t/key-value-pairs-objects-in-isc/34440 "2024-08-15T13:58:47Z")
How do you all handle key/value pairs or lookups or whatever it’s called? We are working on building few forms for provisioning process and requester input could be based on a certain set of values, maybe a drop down? a… --- ## [Azure PIM Roles Provisioning Failing - 400 RoleAssignmentRequestPolicyValidationFailed](https://community.sailpoint.com/discuss/t/azure-pim-roles-provisioning-failing-400-roleassignmentrequestpolicyvalidationfailed/34304)
**Author:** [@FlorenceFred](https://community.sailpoint.com/discuss/u/FlorenceFred)\ **Replies:** 7\ **Last updated:** [July 30, 2024, 9:46am UTC](https://community.sailpoint.com/discuss/t/azure-pim-roles-provisioning-failing-400-roleassignmentrequestpolicyvalidationfailed/34304 "2024-07-30T09:46:18Z")
Hi Team, We are at IIQ 8.3p3. A few Azure PIM Eligible Roles - azureADEligibleRoles (as of now noticed failures for 2 Azure PIM roles) is failing with the default duration set while all other roles pass. SailPoint def… --- ## [Role assignment criteria help - new accounts](https://community.sailpoint.com/discuss/t/role-assignment-criteria-help-new-accounts/34273)
**Author:** [@salam1](https://community.sailpoint.com/discuss/u/salam1)\ **Replies:** 2\ **Last updated:** [July 25, 2024, 2:12pm UTC](https://community.sailpoint.com/discuss/t/role-assignment-criteria-help-new-accounts/34273 "2024-07-25T14:12:59Z")
Hello, I am looking to create new Salesforce accounts for new hires joining our company via Sailpoint roles. The use case is that I only want to create a base Salesforce account with a minimum access profile via sailpo… --- ## [Role Assignment and Reconciliation](https://community.sailpoint.com/discuss/t/role-assignment-and-reconciliation/34209)
**Author:** [@jreyer](https://community.sailpoint.com/discuss/u/jreyer)\ **Replies:** 3\ **Last updated:** [July 17, 2024, 9:50pm UTC](https://community.sailpoint.com/discuss/t/role-assignment-and-reconciliation/34209 "2024-07-17T21:50:27Z")
Hey folks, If an identity possesses an entitlement due to meeting the membership criteria for a role that contains that entitlement, and that entitlement is removed from the identity directly on the source system, will … --- ## [How to stop duplicate AD accounts created on terminated lifecycle state](https://community.sailpoint.com/discuss/t/how-to-stop-duplicate-ad-accounts-created-on-terminated-lifecycle-state/33929)
**Author:** [@salam1](https://community.sailpoint.com/discuss/u/salam1)\ **Replies:** 3\ **Last updated:** [June 18, 2024, 7:19pm UTC](https://community.sailpoint.com/discuss/t/how-to-stop-duplicate-ad-accounts-created-on-terminated-lifecycle-state/33929 "2024-06-18T19:19:09Z")
Hello, We are currently facing some big challenges with Sailpoint creating duplicate AD accounts (on premise active directory) upon user’s termination in workday. Here is our setup in sailpoint: Birthright role for a… --- ## [Autoprovisioning to correct role using single script](https://community.sailpoint.com/discuss/t/autoprovisioning-to-correct-role-using-single-script/33696)
**Author:** [@vikasrawat](https://community.sailpoint.com/discuss/u/vikasrawat)\ **Replies:** 4\ **Last updated:** [May 7, 2024, 6:26am UTC](https://community.sailpoint.com/discuss/t/autoprovisioning-to-correct-role-using-single-script/33696 "2024-05-07T06:26:33Z")
Hi All, I need to auto provision users to correct role based on couple of attributes in user profile. Considering that there would be 1k+ attribute combinations and will increase in future, its not possible to manually … --- ## [pendingCisTasks](https://community.sailpoint.com/discuss/t/pendingcistasks/33521)
**Author:** [@anthag](https://community.sailpoint.com/discuss/u/anthag)\ **Replies:** 1\ **Last updated:** [April 12, 2024, 4:43pm UTC](https://community.sailpoint.com/discuss/t/pendingcistasks/33521 "2024-04-12T16:43:26Z")
Trying to delete a delaminated source and it’s throwing an error. Unable to delete Source because it is in use by \[pendingCisTasks\]. How would I figure out what is causing this error? --- ## [Failed provisioning of identity in Active Directory](https://community.sailpoint.com/discuss/t/failed-provisioning-of-identity-in-active-directory/33402)
**Author:** [@rohitmisal45](https://community.sailpoint.com/discuss/u/rohitmisal45)\ **Replies:** 2\ **Last updated:** [April 3, 2024, 3:25pm UTC](https://community.sailpoint.com/discuss/t/failed-provisioning-of-identity-in-active-directory/33402 "2024-04-03T15:25:02Z")
I’m attempting to do provisioning with Active Directory. Whenever a new identity is aggregated in SailPoint IIQ, it is provisioned in AD using the Entitlement that I have already created in SailPoint roles. After aggreg… [Next page](https://community.sailpoint.com/discuss/tag/provisioning/80.md?match_all_tags=true&page=1&tags%5B%5D=provisioning)