Timing WSRETRY Jobs

[frayang]

Hi All,

We have a requirement for timing WSRETRY jobs of joiner onboarding lifecycle. 

1. After joiners onboarding, their AD accounts shall be provisioned right after to AD

2. 30 min after AD account being provisioned, provision Birthright Group A to AD

3. 90 min after AD account being provisioned, provision mailbox and Oracle HR

4 120 min AD account being provisioned, provision Birthright Group B and email notification

Have you had a similar workflow implemented? What is the best way/simple/clean way to implement it? 

Thanks in advance!

-Fran

[sudeshjaiswal]

Hello @frayang,

There is no feature to add a delay in the trigger chain. Instead, you can create separate jobs based on the required timings

Thanks.

For Ref:  https://forums.saviynt.com/t5/identity-governance/running-wsretry-job-for-specific-endpoint/td-p/776... 

[rushikeshvartak]

1. After joiners onboarding, their AD accounts shall be provisioned right after to AD - Use Technical Rule

2. 30 min after AD account being provisioned, provision Birthright Group A to AD - You can provision same time using Technical rule else create provisioning Job for specific entitlement type key using advanced configuration in WSRETRY

3. 90 min after AD account being provisioned, provision mailbox and Oracle HR - Schedule Job every 90 minutes  for particular Entitlement , Using taskdate of AD Account you can internal calculate also.

4 120 min AD account being provisioned, provision Birthright Group B and email notification

You can't hold email notifications 

[frayang]

We have a few hundred birthright groups that are hard to be managed in the advanced configure in WSRETRY. Also scheduling a job every 90/120 min won't grantee the desired time range after the account is created as a joiner can be onboarded any time.

I am thinking about to introduce a workflow flag at user level. when user is imported to Saviynt, this flag is set to 0. 30 min after the account is created, update it to 1. 90min after account creation, update it to 2, and 120 min after the account creation, update it to 3. I use this flag to user update rule and technical rules to control when to create tasks, once tasks are in the queue,  WSRETRY can pick them up to provision to targets.

The challenge is how to update the workflow flag at user level based on the account creation datetime. any idea? Thanks

-Fran

[rushikeshvartak]

High Level Approch

• use Entitlement Custom Property which are birthright.
• based on entitlement custom property and time difference between when user is updated and task is created process the task.
•