Multiple approval workflow requirements for same Active Directory Domain

[glegault]

We have a requirement in our environment to use different approval workflows depending on the Endpoints for AD connected applications.

For example, some will use manager and resource owner approval while others require to have access approval on the entitlements owners.

Our understanding is that we need to add a new Active Directory Security System for each different use case. Is this a fair statement?

We did some testing around this and whenever we change the security system on an Endpoint, a new one gets created at the next AD access import job execution creating duplicate endpoints.

Does this mean we would also need to duplicate AD connexions to configure Endpoint mappings accordingly on each connexion depending on workflow requirements? It seems duplicating the Security System is not enough…

Is there another (maybe simpler) way of achieving this?

I suppose we are not the only ones with such requirements.

Thank you in advance for the feedback!

[rushikeshvartak · Accepted solution]

• It seems you are using Endpoints filter.
• Use Endpoints Customproperty to define workflow Level
• Example
  • Endpoint CP1= LM,RO then LM & Resource Owner WF will be followed
  • Endpoint CP1= LM then LM WF will be followed
  •  
• Use if else block in workflow to impalement 
• attach workflow at security system level ( it will work as per endpoint custom property since only 1 security system)

[glegault]

Thank you rushikeshvartak.

I will give this a try. It does make sense and it seems simpler than having multiple security systems and connexions.