After request has been approved
After a request has been approved or declined, users have several options to complete the request/approval process.
Notifying users about the results of provisioning requested access
OpenIAM allows executing actions when the provisioning service receives a response from the connector regarding the provisioning operation.
This behavior should be implemented in the /prov-helper/CustomConnectorResponseListenerHandler.groovy
script.
Based on the status in the connectorResponse
object (succeeded or failed), you can write logic to send specific notifications to relevant users.
OpenIAM does not limit you to notifications—you can invoke any API you require—but in practice, email notifications are the most common action taken after provisioning to target systems is completed.
Performing post actions when request has been approved
Another common post-approval action is integration with ticketing systems.
Starting from version 4.2.1.8, we introduced an example Groovy script:
/workflow/resource/ServiceNowTicketCreation.groovy
, which can be triggered upon completion of the request approval flow.
To execute this script:
- Add its path to the Groovy script field of the resource (either a (manual) managed system or an Activiti request-type resource).
- You can create multiple Groovy scripts and assign them to application resources that require such integrations.