Notes
Notes - notes.io |
FRQ01: IAM feed from NELM (source of truth) auto-triggers AD account creation
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC01.01 Verify identity creation from NELM New user record created in NELM with valid start date Identity created in SailPoint ISC FRQ01
TC01.02 Verify AD account creation triggered by SailPoint for valid identity Identity state is set to Active AD account created using IQService FRQ01
TC01.03 Verify identity enrichment using CSV (Chris21) New CSV feed with additional data for an existing identity Attributes updated in identity record FRQ01
TC01.04 Verify handling of invalid dates in NELM Start date is “30 Feb 2025” Identity state is set to Invalid, no provisioning occurs FRQ01
FRQ04: Percipio Onboarding and Role Management
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC04.01 Verify Percipio account creation on user onboarding User created with Hollard email and Active status REST API call creates user in Percipio FRQ04
TC04.02 Verify Percipio role assignment Identity mapped to “Manager” role REST API assigns "Manager" role in Percipio FRQ04
TC04.03 Verify SAML SSO access for user with Hollard email User attempts login to Percipio Access granted via Entra ID using SAML FRQ04
TC04.04 Validate user attribute sync to Percipio Updated position title, manager name in SailPoint Attributes updated in Percipio via REST API FRQ04
TC04.05 Verify deprovisioning of Percipio access on termination End date reached + grace period passed User account deactivated in Percipio FRQ04
FRQ06: Employee status change reflected in downstream systems
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC06.01 Validate transfer update reflects in AD and Percipio Change in department in CSV AD OU updated; Percipio updated accordingly FRQ06
TC06.02 Validate status update from Active → Offboarding End date updated in CSV file Lifecycle state transitions to Offboarding FRQ06
FRQ11 / FRQ13: User offboarding and de-provisioning
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC11.01 Verify account deactivation on employee’s last working day End date == today AD, Entra ID, Percipio accounts are disabled FRQ11, FRQ13
TC11.02 Validate entitlement removal post 7-day grace period End date + 7 days reached All entitlements revoked FRQ13
TC11.03 Validate Leaver Notification – Offboarding Lifecycle state set to Offboarding Email sent to IT Operations with user details FRQ12
FRQ15: Email notifications for provisioning events
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC15.01 Validate email to IT Ops on AD account creation Identity status = Active, AD account created Email sent to Service Desk team FRQ15
TC15.02 Validate fallback mechanism if AD not created within 10 minutes No AD account after 10 mins of activation Task created for IAM Support to investigate FRQ15
FRQ02: IAM platform reconciles user account and lifecycle data
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC02.01 Validate identity state transitions based on start and end dates Identity with future start date Lifecycle state = Prehire FRQ02
TC02.02 Reconcile lifecycle state for employee with expired end date + grace End date passed 8 days ago Lifecycle state = Inactive FRQ02
TC02.03 Validate identity status recalculates on identity aggregation Trigger source aggregation Lifecycle state recalculated and updated FRQ02
FRQ03: AD Account creation aligns with OU structure, naming, and attribute mapping
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC03.01 Verify AD account is created in the correct OU New joiner in Claims Team AD account placed under OU=Claims FRQ03
TC03.02 Validate naming convention (sAMAccountName) generation Name: John Smith sAMAccountName = john.smith or configured format FRQ03
TC03.03 Verify mandatory attribute mapping for AD provisioning Attributes in CSV present AD account includes mail, department, title, etc. FRQ03
FRQ05: IAM syncs mapped attribute changes to in-scope apps
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC05.01 Verify update to position title syncs to AD and Percipio Position title updated in CSV Title updated in AD and Percipio FRQ05
TC05.02 Ensure sync respects precedence rules between NELM and CSV Conflicting manager name Value from CSV takes precedence FRQ05
FRQ07: IAM automatically provisions birthright and persona-based access
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC07.01 Verify automatic provisioning of birthright access for employee New user joins (CSV input) Default AD groups and Percipio roles assigned FRQ07
TC07.02 Validate role-based access for People Leader persona Persona = Manager Additional “People Leader” entitlements assigned FRQ07
TC07.03 Validate access revocation on attribute change Persona removed or job code changed Role-based access is revoked FRQ07
FRQ08: IAM dashboard reports (orphan accounts, entitlements, compliance)
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC08.01 Generate orphan accounts report Unlinked accounts in AD Report shows orphan accounts FRQ08
TC08.02 Extract current entitlement ownership Identity linked to groups/roles Dashboard shows entitlements with owners FRQ08
TC08.03 Verify compliance report filters work as expected User selected = “Manager” Filtered report shows direct reports' access FRQ08
FRQ09: Audit trail, access review, persona & entitlements reports
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC09.01 Generate user access history Employee ID input Full audit trail available FRQ09
TC09.02 Generate access review report for manager Manager login View all reports and their entitlements FRQ09
TC09.03 Validate persona mapping reports Role: Claims Assessor Report shows matching entitlements and access FRQ09
FRQ10: Admin SSO login via Entra ID
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC10.01 Validate SSO login for SailPoint Admins Admin accesses ISC console Login succeeds via Entra ID SAML FRQ10
TC10.02 Bypass SSO in event of IDP failure (fail-safe test) Entra ID misconfigured Admin login possible via failover FRQ10
FRQ14: SIEM Integration (Microsoft Sentinel)
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC14.01 Verify logs sent to Sentinel on account activation New AD account created Log entry appears in Sentinel (Active) FRQ14
TC14.02 Validate deactivated accounts log appears Identity state = Inactive Log in Sentinel with status “Deactivated” FRQ14
🔄 Traceability Matrix (Updated)
Req ID Description Test Case IDs
FRQ02 Account & lifecycle reconciliation TC02.01 – TC02.03
FRQ03 AD OU/naming/attribute alignment TC03.01 – TC03.03
FRQ05 Attribute sync in downstream apps TC05.01 – TC05.02
FRQ07 Joiner provisioning and persona access TC07.01 – TC07.03
FRQ08 Dashboard reports: orphan & compliance TC08.01 – TC08.03
FRQ09 Audit and access review reports TC09.01 – TC09.03
FRQ10 Admin SSO login via Entra ID TC10.01 – TC10.02
FRQ14 SIEM Integration: Active/Deactivated logs TC14.01 – TC14.02
🔄 Traceability Matrix
Requirement ID Description Test Cases
FRQ01 Identity creation from NELM, AD provisioning TC01.01 to TC01.04
FRQ04 Percipio integration, role management TC04.01 to TC04.05
FRQ06 Employee status change propagation TC06.01 to TC06.02
FRQ11 Offboarding triggers account disable TC11.01
FRQ12 Notification to manager on offboarding TC11.03
FRQ13 Entitlement revocation after grace TC11.02
FRQ15 Joiner email notifications TC15.01, TC15.02
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC01.01 Verify identity creation from NELM New user record created in NELM with valid start date Identity created in SailPoint ISC FRQ01
TC01.02 Verify AD account creation triggered by SailPoint for valid identity Identity state is set to Active AD account created using IQService FRQ01
TC01.03 Verify identity enrichment using CSV (Chris21) New CSV feed with additional data for an existing identity Attributes updated in identity record FRQ01
TC01.04 Verify handling of invalid dates in NELM Start date is “30 Feb 2025” Identity state is set to Invalid, no provisioning occurs FRQ01
FRQ04: Percipio Onboarding and Role Management
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC04.01 Verify Percipio account creation on user onboarding User created with Hollard email and Active status REST API call creates user in Percipio FRQ04
TC04.02 Verify Percipio role assignment Identity mapped to “Manager” role REST API assigns "Manager" role in Percipio FRQ04
TC04.03 Verify SAML SSO access for user with Hollard email User attempts login to Percipio Access granted via Entra ID using SAML FRQ04
TC04.04 Validate user attribute sync to Percipio Updated position title, manager name in SailPoint Attributes updated in Percipio via REST API FRQ04
TC04.05 Verify deprovisioning of Percipio access on termination End date reached + grace period passed User account deactivated in Percipio FRQ04
FRQ06: Employee status change reflected in downstream systems
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC06.01 Validate transfer update reflects in AD and Percipio Change in department in CSV AD OU updated; Percipio updated accordingly FRQ06
TC06.02 Validate status update from Active → Offboarding End date updated in CSV file Lifecycle state transitions to Offboarding FRQ06
FRQ11 / FRQ13: User offboarding and de-provisioning
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC11.01 Verify account deactivation on employee’s last working day End date == today AD, Entra ID, Percipio accounts are disabled FRQ11, FRQ13
TC11.02 Validate entitlement removal post 7-day grace period End date + 7 days reached All entitlements revoked FRQ13
TC11.03 Validate Leaver Notification – Offboarding Lifecycle state set to Offboarding Email sent to IT Operations with user details FRQ12
FRQ15: Email notifications for provisioning events
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC15.01 Validate email to IT Ops on AD account creation Identity status = Active, AD account created Email sent to Service Desk team FRQ15
TC15.02 Validate fallback mechanism if AD not created within 10 minutes No AD account after 10 mins of activation Task created for IAM Support to investigate FRQ15
FRQ02: IAM platform reconciles user account and lifecycle data
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC02.01 Validate identity state transitions based on start and end dates Identity with future start date Lifecycle state = Prehire FRQ02
TC02.02 Reconcile lifecycle state for employee with expired end date + grace End date passed 8 days ago Lifecycle state = Inactive FRQ02
TC02.03 Validate identity status recalculates on identity aggregation Trigger source aggregation Lifecycle state recalculated and updated FRQ02
FRQ03: AD Account creation aligns with OU structure, naming, and attribute mapping
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC03.01 Verify AD account is created in the correct OU New joiner in Claims Team AD account placed under OU=Claims FRQ03
TC03.02 Validate naming convention (sAMAccountName) generation Name: John Smith sAMAccountName = john.smith or configured format FRQ03
TC03.03 Verify mandatory attribute mapping for AD provisioning Attributes in CSV present AD account includes mail, department, title, etc. FRQ03
FRQ05: IAM syncs mapped attribute changes to in-scope apps
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC05.01 Verify update to position title syncs to AD and Percipio Position title updated in CSV Title updated in AD and Percipio FRQ05
TC05.02 Ensure sync respects precedence rules between NELM and CSV Conflicting manager name Value from CSV takes precedence FRQ05
FRQ07: IAM automatically provisions birthright and persona-based access
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC07.01 Verify automatic provisioning of birthright access for employee New user joins (CSV input) Default AD groups and Percipio roles assigned FRQ07
TC07.02 Validate role-based access for People Leader persona Persona = Manager Additional “People Leader” entitlements assigned FRQ07
TC07.03 Validate access revocation on attribute change Persona removed or job code changed Role-based access is revoked FRQ07
FRQ08: IAM dashboard reports (orphan accounts, entitlements, compliance)
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC08.01 Generate orphan accounts report Unlinked accounts in AD Report shows orphan accounts FRQ08
TC08.02 Extract current entitlement ownership Identity linked to groups/roles Dashboard shows entitlements with owners FRQ08
TC08.03 Verify compliance report filters work as expected User selected = “Manager” Filtered report shows direct reports' access FRQ08
FRQ09: Audit trail, access review, persona & entitlements reports
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC09.01 Generate user access history Employee ID input Full audit trail available FRQ09
TC09.02 Generate access review report for manager Manager login View all reports and their entitlements FRQ09
TC09.03 Validate persona mapping reports Role: Claims Assessor Report shows matching entitlements and access FRQ09
FRQ10: Admin SSO login via Entra ID
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC10.01 Validate SSO login for SailPoint Admins Admin accesses ISC console Login succeeds via Entra ID SAML FRQ10
TC10.02 Bypass SSO in event of IDP failure (fail-safe test) Entra ID misconfigured Admin login possible via failover FRQ10
FRQ14: SIEM Integration (Microsoft Sentinel)
TC ID Test Case Description Input / Precondition Expected Result Req ID Source
TC14.01 Verify logs sent to Sentinel on account activation New AD account created Log entry appears in Sentinel (Active) FRQ14
TC14.02 Validate deactivated accounts log appears Identity state = Inactive Log in Sentinel with status “Deactivated” FRQ14
🔄 Traceability Matrix (Updated)
Req ID Description Test Case IDs
FRQ02 Account & lifecycle reconciliation TC02.01 – TC02.03
FRQ03 AD OU/naming/attribute alignment TC03.01 – TC03.03
FRQ05 Attribute sync in downstream apps TC05.01 – TC05.02
FRQ07 Joiner provisioning and persona access TC07.01 – TC07.03
FRQ08 Dashboard reports: orphan & compliance TC08.01 – TC08.03
FRQ09 Audit and access review reports TC09.01 – TC09.03
FRQ10 Admin SSO login via Entra ID TC10.01 – TC10.02
FRQ14 SIEM Integration: Active/Deactivated logs TC14.01 – TC14.02
🔄 Traceability Matrix
Requirement ID Description Test Cases
FRQ01 Identity creation from NELM, AD provisioning TC01.01 to TC01.04
FRQ04 Percipio integration, role management TC04.01 to TC04.05
FRQ06 Employee status change propagation TC06.01 to TC06.02
FRQ11 Offboarding triggers account disable TC11.01
FRQ12 Notification to manager on offboarding TC11.03
FRQ13 Entitlement revocation after grace TC11.02
FRQ15 Joiner email notifications TC15.01, TC15.02
|
|
Notes is a web-based application for online taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000+ notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 14 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
