---
title: "Workflow Triggers"
slug: "workflow-triggers"
description: "This article was explain the definition, function and creation of workflow triggers in Clarity."
updated: 2025-03-28T14:37:54Z
published: 2025-03-28T14:37:54Z
canonical: "help.claritysecurity.com/workflow-triggers"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workflow Triggers

## Trigger Types

Workflow triggers are broken up into four types, New Hires, Terminations, Access Requests, Provisioning

> [!NOTE]
> Changing Triggers
> 
> Once a workflow has been enabled and triggered once, the "Workflow Trigger for that workflow can no longer be modified. You must create a new workflow to use a different trigger.

### New Hires (Joiners)

| Name | Description |
| --- | --- |
| Identity Creation | An Identity was created and we are ready to provision. |

### Role Change (Movers)

| Name | Description |
| --- | --- |
| Role Change | An identity's role is changing |

### Terminations (Leavers)

| Name | Description |
| --- | --- |
| Identity Terminated | Identity has been terminated. |
| Service User Terminated | Service User has been terminated. |

### Access Requests (Self Service)

| Name | Description |
| --- | --- |
| Access Request Application | A user requested generic access to an application in the self-service portal |
| Access Request Entitlement | A user requested access to an entitlement in the self-service portal |
| Access Request to Remove Entitlement | A Manager requested removal of access for a subordinate |
| Access Request Create Role | A user requested a new role creation |
| Access Request Role Entitlement | A user requested role access change to an entitlement |

### Provisioning

| Name | Description |
| --- | --- |
| Provision Entitlement | An entitlement provisioning request has been made |
| Identity Entitlement Added | An entitlement was added from an Identity |
| UnderProvisioned Identity Detected | An identity is missing some role-based entitlements |

### Deprovisioning

| Name | Description |
| --- | --- |
| Successful Deprovision | An entitlement was successfully deprovisioned by Clarity |
| Unsuccessful Deprovision | An entitlement was unsuccessfully deprovisioned by Clarity |
| Identity Entitlement Removed | An entitlement was removed from an Identity |

### Tags

| Name | Description |
| --- | --- |
| Dynamic Tag Added to Entity | One or more entities got a new dynamic tag |
| Dynamic Tag Removed from Entity | One or more entities had a dynamic tag removed |

### Other

| Name | Description |
| --- | --- |
| Identity Modified | Identity's Attribute changed were detected. |
| Application Sync Failure | There was an Application Sync Failure |
| Orphan Detected | An inactive identity was found to have active service users |

---

## Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.

A Service User is a user, or service account, discovered by Clarity in a downstream application.

## Related

- [What are Workflows?](/what-are-workflows.md)
- [Workflow Actions](/workflow-actions.md)
- [Workflow Conditions](/workflow-conditions.md)