Automatically gain access on application depending on other access

[Robbe_Cronos]

Hello,

We have a use case:

When a new user requests access to a specific group in application x, they should automatically be provisioned an account on application y and z and get specific groups on those applications. 

How would we go about doing this in the most efficient way?

Kind regards,

Robbe

[sk · Accepted solution]

You can use entitlement map configuration 

On that specific group in application x set entitlement map with specific groups from Y and Z endpoints. 

[Robbe_Cronos]

Thank you!

Could we use something similar for this?:

If user x clicks on "create new account" on Application y, they should automatically get group a and b on application z.

So in short, the same use case but without requesting a group on application x

[Sivagami · Accepted solution]

Yes, we do have an option. You can use Entitlement with New Account Option in Endpoints.

Add Group a and b from Application Z to the Entitlements With New Account option (Actions->Add Entitlement) on Application Y.

-Siva

[Robbe_Cronos]

Thank you very much! That worked perfectly!

[Sivagami]

While creating entitlement map, make sure Dependent Task config is on for the tasks to get created for mapped entitlements from endpoints Y and Z when entitlement X is requested.

For more details on different configs while adding entitlement map - refer https://saviynt.freshdesk.com/support/solutions/articles/43000527104-viewing-or-updating-entitlement...

[rushikeshvartak]

Solutions

1. Entitlement Map under Entitlements
2. Entitlements with New Account under Endpoint
3. Application Role