Automated One Identity Certification Chasing
Every Monday, WebRun opens One Identity, checks every access certification campaign for reviewers who haven't completed their review, logs each overdue certification as a Trello card, and nudges the reviewer on WhatsApp.
How do I chase overdue access certifications in One Identity?
WebRun checks One Identity every Monday for access certifications past their campaign deadline, logs each overdue one as a Trello card with the responsible reviewer, and nudges that reviewer on WhatsApp. It never approves, denies, or revokes access itself, so every access decision stays human led.
- Overdue certifications get chased weekly instead of at audit time
- Every reviewer gets a direct nudge with their outstanding items
- Access approvals and revocations always stay a human decision
Built for identity governance teams · IT security · compliance and audit · access review owners
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
www.oneidentity.comin a real browser with your saved login - no setup, no API keys. -
1
One Identity - check overdue certifications
oneidentity.com
WebRun opens One Identity to check overdue certifications. - Open the One Identity access certification campaign view
- Check every reviewer's completion status against the campaign deadline
- Flag reviewers with certifications still open past the deadline
Done when Every open certification has a checked reviewer and deadline status.
-
2
Trello - log a chase card
trello.com
WebRun opens Trello to log a chase card. - Open the access certification tracking board in Trello
- Add a card for each overdue certification with the reviewer and how many days overdue
- Move a card to Done once the reviewer completes it in One Identity
Done when Every overdue certification has a Trello card.
-
3
WhatsApp - nudge the reviewer
whatsapp.com
WebRun opens WhatsApp to nudge the reviewer. - Send the reviewer a WhatsApp nudge naming the overdue certification
- Ask them to complete the review directly in One Identity
- Never approve, deny, or revoke access on the reviewer's behalf
Done when Every reviewer with an overdue certification has been nudged this run.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will WebRun approve or revoke access itself?
No. WebRun never makes an access decision. It only tracks which certifications are overdue and nudges the assigned reviewer to complete their own review in One Identity.
How is a certification considered overdue?
Any review still open after the campaign's own deadline in One Identity, read directly from the campaign status.
What happens to access while a certification is overdue?
Nothing changes automatically. WebRun only chases the review. Any change to that access requires the reviewer's decision and a human to apply it.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.