Workflow Libraries

  What is a workflow library?

• Workflow Libraries are sets of compiled Java methods accessible to workflows.

What are the workflow default libraries?

• Identity
• Role
• PolicyViolation
• LCM libraries

IdentityLibrary: This is used to

• getManager()
• activate, de-activate role assignment
• Refresh Identities
• Compiling Provisioning plan
• Build, Assimilate Provisioning Forms
• Auditing etc.,

IdentityRequestLibrary: This is used to

• Create Identity Request, update Identity Request state
• Refresh Identity Request afterApproval and Provisioning etc.,

ApprovalLibrary: This is used to

• Get Object(Approval) owner and name
• Get NewObject(Approval) owner and name
• Checks whether it's a self-Approval or not etc.,

Policy Violation Library: This is used to

• Get the remediateViolation: Remediate SOD violations by removing roles named in the remediations argument.
• Delete the current approval object associated with this workflow.

Role Library: This is used to invoke the methods

• Enable the role
• Disable the role
• buildOwnerApproval

LCM Library: All the methods are moved to a handler

• audit
• addLaunchMessage
• Commit

Sailpoint provided the following rule libraries:

Workflow Library: This is mostly used to get the properties of an identity

which are like displayName, email, managerName, managerEmail, and getting

value of a system configuration property.

LCM Workflow Library: This is used for assimilating WorkItem

ApprovalSet, performs auditing for actions like forward, comment on workItem

and for filtering ApprovalSet.

Approval Library: This is used for getting a list of Approval owners, Role

owner, manager from a provisioning plan, etc.,