In this use case, provisioning is initiated, but the source has provisioning disabled, meaning automated provisioning cannot proceed. The process described is accurate: when provisioning is assigned to a source where provisioning is disabled, IdentityNow does not execute the provisioning through its automated system.
Instead, a manual task is generated for a human to complete the provisioning process. This manual intervention ensures that the necessary access changes can still occur, albeit through human oversight rather than an automated connector.
This scenario aligns with how IdentityNow handles sources that are flagged as non-provisionable. The provisioning logic is still calculated within the system, but actual implementation requires manual steps when the source is configured in this way.
References:
* SailPoint IdentityNow Provisioning Architecture.
* SailPoint IdentityNow Manual Provisioning Workflow Documentation.

The provided use case incorrectly describes the provisioning process on a source that has provisioning disabled. If provisioning is disabled for a source, automated provisioning via the Virtual Appliance and connectors is not possible. The Virtual Appliance cannot retry or carry out the provisioning in this case, as the system explicitly prevents automated provisioning operations on sources marked as non-provisionable.
When a source has provisioning disabled, the system only supports manual provisioning, where a task is opened in IdentityNow for a person to manually execute the provisioning steps. The Virtual Appliance does not handle provisioning for disabled sources, so the described scenario where it retries the request and carries out provisioning is inaccurate.
References:
* SailPoint IdentityNow Provisioning Configuration Guide.
* SailPoint IdentityNow Virtual Appliance and Connector Operations Documentation.

No, the search syntax @accounts( source.name:"AD" AND disabled:true ) is incorrect for SailPoint IdentityNow because the attribute disabled may not be universally recognized or applicable for all sources in the system. Using the state:"disabled" condition (as in previous correct answers) is a more reliable and system-compliant approach to find disabled accounts.
Key Reference from SailPoint Documentation:
* Standard Account State Search: The correct search syntax involves using state:"disabled" instead of disabled:true for querying disabled accounts.

Yes, validating the email template (e.g., Certification Due) is a best practice before the campaign preview is generated. Communication during a certification campaign is key to ensuring that managers are aware of their tasks and deadlines. Validating the email templates helps ensure that the messaging is clear, correct, and aligned with the campaign's objectives. It also ensures that any necessary details, such as deadlines, instructions, and links to the certification tasks, are properly included.
Proper validation of email templates helps avoid communication issues that could delay or negatively impact the campaign's success.
References:
* SailPoint IdentityNow Certification Campaign Email Templates Guide.
* SailPoint IdentityNow Best Practices for Campaign Communication.

SailPoint IdentityNow allows HTML editing of email templates to customize the look, feel, and content of notifications. Administrators can modify email templates using HTML to include company branding, custom messages, and specific formatting based on their organization's communication needs.
SailPoint provides out-of-the-box email templates for common scenarios such as access requests, password resets, or provisioning notifications. Administrators can enhance these templates using HTML and inline CSS to personalize the messages for their users.
Key Reference from SailPoint Documentation:
* Email Template Customization in IdentityNow: SailPoint supports the editing of email templates via HTML to meet specific organizational requirements. Administrators can navigate to the email templates section within the admin interface and update the HTML content as needed.