Pre-requisite for Recertification

For the recertification to work in EmpowerID, certain prerequisites must exist. For example, a job must be running for compilation. In this post, we are going to learn the pre-requisites for creating recertification policies and audits.

Prerequisite Jobs

Following jobs should be running for policy creation, audit creation as well as fulfillment of the business requests.

1. Attestation Policy Compiler Job

2. Business Request Fulfillment Job

Check the Status of Attestation Policy Compiler Job.

1. Log in to the EmpowerID web application.

2. On the navbar, expand Admins and select Account Stores and Systems.

3. On the Job history tab page, search for the Attestation Policy Compiler.
   
   

   Open

   

   
   Check the Status of Business Request Fulfillment Job.
   1. Log in to the EmpowerID web application.
   2. On the navbar, expand Infrastructure Admin and expand EmpowerID Servers and Settings.
   3. Click on EmpowerID Servers and search for Business Request Fulfillment Job.
   
   

   Open

   

Decision Configuration for Business Requests

The possible decisions for account validity recertification policy( and other recertification policies) type are configurable. For configuring them we need to take the following steps.

1. Log in to the EmpowerID web application

2. On the navbar, expand IT Shop and select Approval Flow Policies.

3. On the Approval Flow Policies page, select the Item Type Actions tab.

4. Then search for Recertify Account Validity.

5. Click on the Recertify Account Validity and scroll down to select Decisions for Approval Flow Steps.
   
   

    

6. Click on the + icon to add more approval decision if needed.

7. As shown in the above screenshot, what happens when the approval decision is taken as
   Certify - no fulfillment work flow is needed.
   Delete - Recert delete account fulfillment work flow is started.
   Disable - Recert disable account fulfillment work flow is started.

8. You can also edit or change the workflows that should execute as per an approval decision. Just click on the edit icon on the above image.
   
   

    

9. To see how the business requests generated are grouped for approval, we need to open the approval step selected by right click and open in new window. Here the approval step is account manager as shown in the image above. In this case it is bundled as per two rule types ( resource owner and target resource line manager) as shown in the image below. So based on what is configured in approval step the business requests generated will be routed to for approval.
   
   

   
   
   Workflow Configuration
   
   

10. When you edit the Item Type Actions named Recertify Account Validity, you would be able to see the fulfillment workflow. For this item the fulfillment workflow selected is Account Recet Ful as shown in the image below. For the fulfillment the selected workflow is run. This workflow assignment is configurable as well. You can delete it and select another workflow if needed.
    
    

    
    
    

Next Steps

• Create Recertification Policy

• Create Recertification Audit