New Capability: Multi-Account Support!

Description

Identity Security Cloud now supports account selection in the Access Request flow!

New Capabilities

When a user has more than one account on a source, the requester is prompted to choose which account to provision access to, and likewise, each record of a user’s access includes account data to support access revocation from the appropriate account.

Problem

Until now, access requests were only supported for users who had a single account on a system, but some users (especially administrators and power users) frequently had multiple accounts on a given system. This limitation meant access could not be requested for those users through Identity Security Cloud (ISC). The common customer workaround was to create a separate source instance per account type for every system where this situation occurred, but that created a lot of system overhead and often duplicated thousands of entitlements in their ISC implementation.

Solution

Admins define one source per system and configure their logic to correlate all of a user’s accounts from that source to their identity. At the end of the request submission flow (when applicable), the access requester is then prompted to select the appropriate account from the list of the target user’s correlated accounts. For that account selection, they are shown the attributes marked as the Account ID and Account Name in the source’s account schema.

Approvers are shown the account selection as part of the Details overlay on the approval item.

The My Request record also reflects the account selection, and both requester and requestee can see that component of the request when reviewing the submitted request flow or history. Audit records (e.g., submitted, approved, processed) also capture the account selection detail.

Who is affected?

This feature will commonly cater to IT personnel or those requesting on their behalf because IT staff are the most likely to have multiple accounts on a system. However, this feature is for any user who has multiple accounts on any source.

Important Dates

• Sandbox Rollout: Week of March 31, 2025
• Production Rollout: Week of April 7, 2025

To ask questions and learn more please visit the Developer Community.