The JIT recertification flow simplifies the process of handling recertification events that occur due to changes in resources or policies without requiring a recertification audit. In some instances, recertification may be necessary, for example, when a person changes departments and their group memberships or management role assignments need to be verified. In such scenarios, previously, the only option was to create an audit, but now, the flow item can trigger the creation of a business request to recertify the resource without the need for a complete audit.
The JIT recertification flow item is tied to a recertification policy that can define which type of data should be certified when the flow item is triggered. Each recertification policy has a Target(s) to configure who/what to recertify, and the Item Type Scope will determine which data/access to recertify.
Tip |
---|
Recertification Policy : Recertification policies determine the type of access information that needs to be reviewed and validated for each user. Read More Target: Recertification targets configure who/what to recertify. Targets are added to the policy. Read More Item Scope Type: Item Type Scope will determine which data/access the policy will recertify. Targets are added to the policy. Read More |
Note |
---|
When choosing a recertification policy, it's important to ensure that the policy applies to all resources and not just a single individual. For example, if a policy only targets a particular person, it's not effective because the event won't generate a recertification for other individuals in the same event. Therefore, it's essential to have a policy that applies to all resources for effective recertification. Typically, special recertification policies are created for the JIT recertification flow item, which is usually shipped with the product and should not be included in other normal audits. If you want to change the default policy, make sure you meet the requirements discussed here. |
You can customize how the JIT recertification process works by adjusting key configurations like Item Type Action, the Recertification Policy, and the Approval Fulfillment Workflow. By default, the system uses "FWPersonJITRecertification" as the standard Approval Fulfillment Workflow. Follow the steps below to view and change the flow item settings.
...