Summary of Workflows, Tasks, and Rules in Provisioning

The following table provides an at-a-glance list of workflows, tasks and rules for provisioning through IdentityIQ.

For an overview of developing and using rules in IdentityIQ, see Rules and Scripts in IdentityIQ.

Type

Name

Purpose / Usage

Workflow

Lifecycle Manager:
LCM Provisioning
LCM Create and Update
LCM Manage Passwords
LCM Registration

Manages actions requested through Lifecycle Manager.

Workflow

Identity Update

Manages the provisioning actions required based on an Identity Cube update.

Workflow

Identity Refresh

Manages the provisioning actions required from an Identity Refresh.

Workflow

Lifecycle Event – Joiner

Lifecycle Event – Manager Change

Lifecycle Event – Leaver

Lifecycle Event – Reinstate

Controls the Lifecycle Event-driven activities, which can contain provisioning actions.

Workflow (subprocess)

Do Provisioning Forms

Creates, presents and gathers data from provisioning forms. This step is the interactive provisioning policy phase of provisioning.

Workflow (subprocess)

Do Manual Actions

Presents the unmanaged portion of a provisioning project as work items to be processed manually. Update and Identity Refresh workflows use this step. Lifecycle Manager has a similar step but audits differently.

Workflow (subprocess)

Provision with Retries

Manages retries on the provisioning actions for Lifecycle Manager.

Workflow (subprocess)

Identity Request Initialize
Identity Request Violation Review
Identity Request Approve
Identity Request Approve Identity Changes
Identity Request Provision
Identity Request Notify
Identity Request Finalize
Provisioning Approval Subprocess

These workflows subdivide Lifecycle Manager Provisioning into more manageable workflow parts. Lifecycle workflows also use some or all of these tasks.

Task

Identity Refresh

Creates provisioning requests based on application of role assignment rules or role detection.

Task

Perform Maintenance

Processes certification-generated and policy violation-generated remediation requests.

Task

Account Aggregation

Provisioning activities driven by integration configurations or Work Items require a reaggregation from the target system before the identities can be updated with the access change.

Rule

FieldValue

Identifies the default value for the Provisioning Policy field.

Rule

AllowedValues

Constrains allowed values for the Provisioning Policy field.

Rule

Validation

Defines validation process for Provisioning Policy field.

Rule

Owner

Defines owner for Provisioning Policy field.

Rule

PlanInitializer

Can be specified for any IntegrationConfig or ProvisioningConfig to run installation-specific pre-processing in Plan Evaluation step before carrying out provisioning.

Rule

IdentityTrigger

Can determine the triggering of a Lifecycle Event.