TwoLevelRoleCompositionCertification

ashishpatel37 — Fri, 07 Jun 2024 17:57:02 GMT

<Workflow name="TwoLevelRoleCompositionCertification" type="RoleCertification">
<description>
Two-level certification process for role composition, involving primary and secondary certifiers.
</description>

<variable name="campaignId" type="String"/>
<variable name="primaryCertifiers" type="List"/>
<variable name="secondaryCertifiers" type="List"/>
<variable name="certificationItems" type="List"/>

<step name="StartCertification" type="start">
<inputs>
<arg name="campaignId" value="$campaignId"/>
</inputs>
<returns>
<arg name="primaryCertifiers" value="$primaryCertifiers"/>
</returns>
<transitions>
<transition name="toPrimaryCertifierReview" to="PrimaryCertifierReview"/>
</transitions>
</step>

<step name="PrimaryCertifierReview">
<assignment>
<dynamicAssignee>
<identity>
<id>$primaryCertifiers</id>
</identity>
</dynamicAssignee>
</assignment>
<notification>
<templateRef>certification/PrimaryCertifierNotification</templateRef>
</notification>
<task>
<certification>
<action>review</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
<returns>
<arg name="certificationItems" value="$certificationItems"/>
</returns>
<transitions>
<transition name="toSecondaryCertifierReview" to="SecondaryCertifierReview"/>
</transitions>
</step>

<step name="SecondaryCertifierReview">
<assignment>
<dynamicAssignee>
<identity>
<id>$secondaryCertifiers</id>
</identity>
</dynamicAssignee>
</assignment>
<notification>
<templateRef>certification/SecondaryCertifierNotification</templateRef>
</notification>
<task>
<certification>
<action>review</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
<returns>
<arg name="certificationItems" value="$certificationItems"/>
</returns>
<transitions>
<transition name="toCloseCertification" to="CloseCertification"/>
</transitions>
</step>

<step name="CloseCertification" type="finish">
<notification>
<templateRef>certification/CertificationCompletedNotification</templateRef>
</notification>
<task>
<certification>
<action>complete</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
</step>
</Workflow>

Notifications Templates

Ensure you have notification templates defined in the certification folder:

PrimaryCertifierNotification
SecondaryCertifierNotification
CertificationCompletedNotification

Testing and Customization

Deploy Workflow:
- Navigate to Setup > Workflow Definitions in SailPoint IdentityIQ.
- Upload and deploy the XML workflow.
Test Workflow:
- Create a pilot certification campaign using the deployed workflow.
- Verify the notifications, task assignments, and transitions work as expected.
Customize as Needed:
- Adjust the workflow steps, notifications, and transitions based on specific business requirements and feedback from testing.

Re: TwoLevelRoleCompositionCertification

lennoz — Sat, 28 Dec 2024 21:49:13 GMT

I know this was always possible, however SailPoint said this is not industry best practice and this customization does have it down-falls like longer entitlement review cycle.

topic TwoLevelRoleCompositionCertification in Northeast User Group

TwoLevelRoleCompositionCertification

Notifications Templates

Testing and Customization

Re: TwoLevelRoleCompositionCertification