Managing Custom Access Requests

The SAP IAG connector allows you to dynamically configure Access Request Priority, Access Request Reason Code, and Access validity dates through a Before Provisioning Rule. For more information, refer to How do I get implementation details regarding sample attribute requests for Access Priority, Request Reason Code, and Validity dates for user access?

  • To set the Access Request Priority use,

    • Copy 
    <AttributeRequest name="accessRequestPriority" op="Set" value="5"/>

  • To set the Access Request Reason Code use,

    Copy 
    <AttributeRequest name="accessRequestReasonCode" op="Set" value="CustomRequestReason"/>

    Note
    If the Access Request Priority and Access Request Reason Code is not provided in the plan, it will be retrieved from the application configuration.

  • To set Validity dates on a role use,

    Copy 
    <AttributeRequest name="Access" op="Add" value="<nativeId of access>">
      <Attributes>
        <Map>
          <entry key="endDate" value="2027-03-10"/>
          <entry key="startDate" value="2025-03-10"/>
        </Map>
      </Attributes>
    </AttributeRequest>

    If the validity dates are not provided in the plan, the startDate will be set to the current date, and the endDate will be set to 9999-12-31 by default.