A graphical representation of an identity/person is centered inside a blue circle with a black background.

IAM Solutions provision application-based accounts to users based on Job Title or specific attributes that the business would use. There are cases however, that additional accounts are needed that was not part of the Job Title template. This could be for temporary access to the application or a workflow is required prior to provisioning the account. IBM Security Identity Governance and Intelligence (ISIGI) Process Designer is built for this use case.

The benefits of this workflow are:

Limit individuals who could create the request.
Multiple Levels of Approval.
View Accounts, Entitlements, or Approval Status through ISIGI Reports.

Limit Individuals

In the screenshot below, the user logged in is a User Manager. The User Manager Account Request tab is where the user manager could request additional accounts for users.

Under Select a User the user manager can only select users that are assigned to them.

Once the manager has made the request to submit a new account the request now goes through an approval process.

Approval Process

In this approval process, we have assigned the Department Manager to complete the first level of approval and the Application Manager to complete the second level of approval.

For applications that have been configured through ISIGI Enterprise Connectors, once the Application Manager approves the account creation request, the request is sent directly to the application. However, for applications that do not directly connect to ISIGI, applications require application owners to act upon the request. ISIGI would notify the application owner of this request.

Once the application owner has chosen Execute, this means that the application owner has manually created the account of the user in the application. On the other hand, for Not Completed, the application owner has not created the account of the user in the application. ISIGI then reflects this change on the ISIGI Person Record.

Reporting

ISIGI's backend is DB2 based, hence creating custom reports is not a daunting task. The report can include the status the application owner has provided: a list of all current accounts of a user or a list of all accounts per application. These reports can be run on frequency or on-demand. With ISIGI requesting new accounts for users is simple and intuitive. If you do have any questions or additional features you'd like to see. Please contact us and we will gladly assist you.

Streamline Account Authorization with ISIGI Process Designer

Services

Solutions

Pricing

Resources

Events

About Us

Get Started