We have a use case:
When a new user requests access to a specific group in application x, they should automatically be provisioned an account on application y and z and get specific groups on those applications.
How would we go about doing this in the most efficient way?
Solved! Go to Solution.
Could we use something similar for this?:
If user x clicks on "create new account" on Application y, they should automatically get group a and b on application z.
So in short, the same use case but without requesting a group on application x
Yes, we do have an option. You can use Entitlement with New Account Option in Endpoints.
Add Group a and b from Application Z to the Entitlements With New Account option (Actions->Add Entitlement) on Application Y.
While creating entitlement map, make sure Dependent Task config is on for the tasks to get created for mapped entitlements from endpoints Y and Z when entitlement X is requested.
For more details on different configs while adding entitlement map - refer https://saviynt.freshdesk.com/support/solutions/articles/43000527104-viewing-or-updating-entitlement...