Configuring Approval Flow

As an Admin, you may also be responsible for configuring approval flow for the requests generated via the ServiceNow Service Portal Integration for Identity Security Cloud. The way an approval is processed depends on it's configuration. The following three types of Approval Flow are available:

  • None (default option): Select this option to use only ServiceNow for raising the request. The request is raised in Identity Security Cloud without any approval steps in ServiceNow. Approvals are then dependent on the Identity Security Cloud configuration.

  • Manager Approval: Select this option to use only ServiceNow as a manager in ServiceNow.

  • Configurable Approvals: Select this option for native ServiceNow approvals. For more details refer to Approval Flexibility.

    Note

    • The approvalsMustBeExternal flag on Identity Security Cloud disables creation of approvals in Identity Security Cloud.
    • For all approval types except Identity Security Cloud WorkFlow it is recommended to set the approvalsMustBeExternal flag to true. Then, only the admin will be able to raise an access request using the Identity Security Cloud UI, therefore protecting the appropriate approval process.
    • For the Identity Security Cloud WorkFlow approval type it is mandatory to set the approvalsMustBeExternal flag to false. The ServiceNow Service Catalog integration is dependent on Identity Security Cloud for approval details, and this will keep requests from getting auto approved.