• Workflow plicy not running


    We have a pilocy workflow which is due to run after a new user object is created, but it is not.

    The workflow is a simple one ot send an email, but it should only run when the "Custom Attribute 3" of the new user is set to "DCs".…

  • Approvals are getting skipped all of a sudden

    We have several workflows setup that have approval steps in them.   A tech adds a user to a certain group, they get a pop up for justification, that gets emailed to manager and then they approve or reject the request.  This has worked great for over a year…

  • Workflows with if-then, PowerShell scripts, and $work.SavedObjectProperies


    I am working on a workflow to do some automation on our computer objects, and I am running into a weird issue that I am struggling to wrap my head around.

    The error I am receive:

    Executing the 'Run script: DEV New Computer Object Tag Location on…

  • Multiple issues regarding attributes

    I created a virtual attribute and linked it to a class that isn't a user or a group. It's actually a class that was implemented through a schema extension. I also created a workflow policy and the first step is to search for objects of this class. Unfortunately…

  • ARS Upgrade to 8.0 workflow approvals that request information causes error


    This is my very first posting to any One Identity forum.  I recently upgraded my Active Roles server from 7.4.3 to 8.0 and noticed that some of my workflows are throwing web errors.  This big red error banner on the approval pop-up states "Object…

  • workflow trigger not an Active Roles operation


    I'm using Active Roles 7.5 and I'm looking for assistance on creating a workflow (on demand or automated) where the trigger isn't initiated within an Active Roles operation.  We have our computers sorted into Operating system and type…

  • Workflow Search for Object Filter

    Have created a scheduled Workflow that searches for accounts that have the employeetype = contractor, and accountexpires > 90 days or accountexpires is empty.  When the workflow is run, it successfully finds the accounts that have accountexpires > 90…

  • Remove Attribute from Accounts if Deprovisioned

    Hi! I am trying to figure out the best way to handle this situation. When we create accounts, we set 2 virtual attributes (edsvaLMSManager and edsvaLMSApprover). Both of these virtual attributes use the DN of the users that are set for their LMSManager…

  • AccountExpires Approval Notification with a real date

    In the approval notification for when a users account expiration is changed, the client is wanting to show a date when the account will expire, or the number of days until the account expires.  The problem is that if we add the AccountExpires attribute…

  • distribution list members -workflow

    I am trying to create a workflow to send a list of group members to the group owner every so often to validate correct group members.

  • try catch not working

    I wrote a custom powershell script and have it run in a workflow.

    I'm having an issue with the try catch statement. If I remove try catch and just run the command inside the try method, the workflow executes fine. However, when a try catch is added,…

  • Workflows Launches Workflow?

    We have some different divisions that I have created workflows to manage, but there are some items that are duplicated over multiple workflows. Is there a way to have a Workflow launch another workflow? If so, it would allow me to consolidate the common…

  • Running Workflows in parallel? Is this possible?

    Hello All,

    my customer asks, if it is possible to run workflows in parallel? If a new User is created, different attributes should be set by different people (e.g. mobile number, Telephone number ertc.). And it make no sense to set the telephone number…

  • Workflow - Trigger notification if virtual attribute equals x


    I would like to create a workflow that triggers a notification when a specific attribute is set to a specific value.

    We have created a custom attribute that will hold a specific value that we would like to monitor.

    The workflow should work on a schedule…

  • Workflow - How to set an attribute to the secondary owner's e-mail address of workflow target?

    Hi everyone,

    Does anyone know how I can set an attribute of my choice, to the e-mail address of the secondary owner of the workflow target? 

    So far, I have the following: 

    >>Operation execution: Create User; where secondary owner of workflow target is not…

  • Okta User Generation - Not Seen as Creation

    We've got Okta provisioning users, soon to be from Workday, through Okta, and then into AR. However, the issue that I'm running into is that when a user is created in Okta that then is replicated to ARS, ARS isn't seeing it as a new user creation. Because…

  • Workflow to add a user to an Admin group, then automatically remove them in X days.

        Management has asked that we limit the time a user is a member of the Enterprise Admins group.  I am copying a workflow that we use for approval of membership in the Domain Admins group, however I see no way to add a time component to the workflow.  Is…

  • Need to find out all attributed modified in function onPreModify

    Hi all!

    I need to dynamically find all attributes modified in function onPreModify($Request).

    I do NOT want to something like:

    function onPreModify($Request)


    if ((IsAttributeModified "edsva_myattribute" $Request) -eq $true)

                #do something…

  • Workflow to Remove User From Group if in Another Group

    What would be the best way, if possible, to remove a user from a group Group1_Test whenever they are a member of another group that begins with Group1. For example, I am currently a member of Group1_Test and I am now being added to Group1_Test2. Is there…

  • Dynamic from email address in a workflow?

    Hi guys,

    Right now we have some new hire and departure workflows set up on a per-user basis, as HR wants the emails to come from them, rather than an HR alias. I was wondering if it's possible to have the from address in a workflow be dynamic based on…

  • Workflow - Show search results in notification


    Im trying to get the search results into a mail notification, I can perform actions to the search results (Disable users, change properties, etc) But I can not get the notification to send me users that matched the search condition.

    Anyone has…

  • AR Workflow - How can I generate daily reports of users matching certain conditions?



    We need to generate a workflow that sends daily reports about users matching conditions such as the following:

    -Users with 30 days without changing password

    -Users with the "User cannot change password" option selected

    -Users that do…

  • Modifying Workflow Parameters in a script


    I'm currently running ARS 6.9 and am trying to understand some basic workflow functionality.


    For a basic example I have a test workflow like so:

    There's a parameter for it aptly named 'TestParam'. This parameter is set as a string that's…

  • Script a different person in a notification other than manager

    I am creating a user and trying to use the notification task in a workflow but i need a way to add a different person other than a manager to send to.  I have a virtual attrib that has a sam account name that would like to send the notification to.  the…

  • Active Roles Server 7.0.2 workflow for automatically assign Office 365 license to AD user

    Hi, I want to specific assign Office 365 license to Active Directory user accounts depending on group membership or OU location.

    What is the best way to perform this process and can you help me by providing information about how to do it.