Idea Details

Publish and Unpublish certifications tasks

Last activity 09-15-2018 03:34 PM
mustapha.benmahbous's profile image
08-14-2016 01:06 PM

We have a use case of certifications that would be created and running (in an unpublish status)  but we don't want them to be available to reviewers but only available to Compliance team to validate the certification tasks, members and entitlements content. The Use case here is to be able to review the certification content and possibly update the reviewers before making the certification available to end-users ( published to reviewers).


Currently the certification has two possible status values : Created - Running (in addition  to Stopped or archived). We believe there should another status which is Published before running to allow fixing errors or update approvers.. when a certification is created and not running we could not update or reassign reviewers they are even not visible. If we have the certification running, Managers do have access to the certification even if they are not notified yet.


This very important for our customer. The compliance team because of this missing status cannot proceed with the certification QA (part of the SOX requirements).


Thank you !


09-15-2018 03:34 PM

One option that may satisfy (most of) this use case requirements is to set the certification to "Manual Start". By doing this, the certification will appear under "Planned Certifications" in "Certification Management". This will allow the Compliance team to review the users/roles/resources before the certification starts, or is published. This is useful to verify that the correct filters were used when building the certification. If it does not appear as expected, simply stop and recreate the certification. The only thing that it will not satisfy is the ability to see or update the reviewers, as they are not visible until the certification is active.


If necessary, you can get around the issue of not being able to see the reviewers by getting creative with some email settings. For example:


If your "mail.sending.interval" property is set to 900, that is 15 minutes.

Check or set when your next notification emails will be sent by going to Administration > Job Scheduler > Email Sending

Start the campaign right after the next email notification job runs, and you have 15 minutes to validate the reviewers. If you need more time, adjust the "mail.sending.interval" property.

If everything is correct, do nothing.

If they are incorrect:

   stop the campaign

   set the "mail.server" property to a value that is incorrect (so that the mail will fail)

   set "mail.max.attempts" to 1

   after the next scheduled email job runs, no further attempts will be made and the "mail.server" and "mail.max.attempts" properties can be restored to normal values


This is not very clean, but it can work. However, there are a couple of things to consider. First, even though a reviewer will not receive a notification email, if they happen to log in while the certification is active, then they will see the certification. Second, if any other notification emails that need to be delivered are queued to be sent when the "mail.server" setting is incorrect, they will not be delivered to the reviewer. You must make sure that no other emails are pending and that no other email jobs (like email escalation jobs) are scheduled during this time.