Starting a Certification Campaign

When the start date of a campaign in state Campaign is in preparation (PREPARING) is reached, the Certification Campaign Controller workflow starts the campaign.

The workflow is normally triggered according to the defined schedule. However, you can also start it manually using DirX Identity Manager:

  1. In the Connectivity view, navigate to the workflow entry.

  2. Select Run Workflow from the context menu.

What the Campaign Controller Does

The Campaign Controller workflow performs the following actions:

  • Collects the users to be certified along with their privilege assignments.

  • Identifies approver(s) for each user.

  • Stores certification tasks in the campaign subtree.

  • Notifies the approvers.

Handling Failures

If something fails — for example, an approver cannot be found for a user — the workflow:

  • Creates the certification task.

  • Sets its state to FAILED.PREPARE.

  • Notifies the campaign owner.

The campaign owner can then:

  • Manually fix the issue.

  • Change the state to PREPARED or RETRY.PREPARE.

When the Certification Campaign workflow runs again, it re-evaluates the task and, if successful, changes the state to RUNNING.

Approver Actions

Approvers can work on their tasks and certify user assignments using:

  • DirX Identity Web Center

  • DirX Identity Business User Interface