Introduction
Hello Sailors,
We had a requirement where we had to create a custom Requester and User Notification email template that is according to the company policy and has appropriate data for both the requester and the user. There were ways to do it and we could have either modified the LCM workflows/sub processes or directly update the email templates. We finally went with the latter approach as we did not want to customize the OOTB workflows and sub processes a lot and make them more complex as we thought that customizing email templates for the same is the better approach. I mean it depends on the architecture and the design from company to company but I hope this is helpful to all the other developers who are trying to follow the similar approach.
Whenever there is access request made from the Manage User Catalog we have configured these email templates in the LCM Provisioning workflow. We use them during notification to users and requester.
Email template sample
Below is the sample XML for the custom Email Template. Hope this makes sense and will be helpful to other Sailors if they run into similar requirement or if they need to customize the email templates.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE EmailTemplate PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<EmailTemplate name="LCM Requester Notification - Custom">
<Body>
<html>
#set ( $spctx = $spTools.class.forName("sailpoint.api.SailPointFactory").getMethod("getFactory", null).invoke(null, null).getCurrentContext() )
#set ( $identity = $spctx.getObjectByName($spTools.class.forName("sailpoint.object.Identity"), $identityName) )
#set ( $launcherIdentity = $spctx.getObjectByName($spTools.class.forName("sailpoint.object.Identity"), $launcher) )
<style type="text/css">
.body {
font-family: Arial;
font-size: 13px;
}
</style>
<body>
<img src="image URL" alt="Company Logo" width="1000" height="120">
<br/>
<br/>
<br/>
<br/>
<b>To:</b> Identity Management Requester<br/>
<b>From:</b>Identity and Access Management System<br/>
<b>Re:</b> Access Request Status<br/>
<br/>
Hello $launcherIdentity.DisplayName,<br/>
The following account changes that you have requested for $identityDisplayName, have been successfully completed.<br/>
#if ( $approvalSet.items )
#set ($approvalSetScanned = [] )
#foreach ($approvalItem in $approvalSet.items)
#set($addList = [])
#set($removeList = [])
#if (!$approvalSetScanned.contains($approvalItem.id))
<br/><b>Application:</b> $approvalItem.applicationName <br/>
#if ( $approvalItem.nativeIdentity )
<b>Account:</b> ($identityDisplayName), $approvalItem.nativeIdentity <br/>
#end
#foreach ($subApprovalItem in $approvalSet.items)
#if ( !$approvalSetScanned.contains($subApprovalItem.id) && $approvalItem.applicationName == $subApprovalItem.applicationName)
#set ($result = $approvalSetScanned.add($subApprovalItem.id))
#if( $subApprovalItem.operation == "Add")
#if($addList.size()==0)
<b>Added Role/Entitlement:</b> <br/>
#end
#if ( $subApprovalItem.displayValue )
#set ( $result = $addList.add($subApprovalItem.displayValue))
<li>Entitlement Name/Value: $subApprovalItem.displayValue</li><br/>
#end
#elseif( $subApprovalItem.operation == "Remove")
#if($removeList.size()==0)
<b>Removed Role/Entitlement:</b> <br/>
#end
#if ( $subApprovalItem.displayValue )
#set ( $result = $removeList.add($subApprovalItem.displayValue))
<li>Entitlement Name: $subApprovalItem.displayValue</li> <br/>
#elseif ( $subApprovalItem.csv )
#set ( $result = $removeList.add($subApprovalItem.csv))
<li>Entitlement Name/Value: $subApprovalItem.csv</li> <br/>
#end
#end
#end
#end
#end
#end
#end
<br/>
<br/>
Thank you,<br/>
The Identity and Access Management Team
</body>
</font>
</html>
</Body>
<Description>
Email Template for notifying requesters when their employee's account(s) are modified.
Note that in addition to the declared arguments, all workflow variables,
Step arguments, and Approval arguments defined in the Workflow are
also available.
</Description>
<Signature>
<Inputs>
<Argument name="workflow" type="Workflow">
<Description>The Workflow object being executed.</Description>
</Argument>
<Argument name="approvalSet" type="ApprovalSet">
<Description>The ApprovalSet object contained in the workflow.</Description>
</Argument>
<Argument name="launcher" type="string">
<Description>The name of the Identity that launched the workflow.</Description>
</Argument>
<Argument name="identityDisplayName" type="string">
<Description>The display name of the Identity that is being changed.</Description>
</Argument>
</Inputs>
</Signature>
<Subject>Account changes you requested for $identityDisplayName were processed</Subject>
</EmailTemplate>
Email send to the requester from the GMB
Sorry for bad indexing and edits on the email image.
Thanks!
Sumit Gupta
