Overview
Approval flows define how access requests are reviewed and approved within your organization.
Using approval flows, you can ensure that every access request follows a structured and consistent process, improving governance and visibility.
What is an approval flow?
An approval flow is a sequence of steps that determines who needs to approve an access request before access is granted.
Each flow can include one or more approvers and can be reused across multiple applications.
Key capabilities
- Multi-step approvals: Define one or more approval steps
- Flexible approvers: Assign specific users or tokens (eg. User's manager)
- Reusable flows: Apply the same approval flow across multiple applications
- Consistency: Standardize how access is granted across your organization
How approval flows work
- A user submits an access request for an application
- The request is routed through the defined approval flow using an approval request task
- Approvers review and approve (or reject) the request
- The requester is automatically notified of the outcome
How approval steps translate to tasks
Each step in the approval flow is translated into a Torii approval request task.
- A single-step flow will generate one approval task
- A multi-step flow will generate multiple tasks, one for each step
- Tasks are created and assigned dynamically as the request progresses
This means that a single access request may include one or more approval tasks, depending on how the flow is configured.
Creating an approval flow
- Navigate to App Catalog
- Go to Approval Flows
- Click Create approval flow
- Define:
- Flow name
- Approval steps
- Approvers for each step
- Save the flow
Apply an approval flow to an access request policy
After creating an approval flow, you need to assign it to an access request policy to ensure it is applied when users request access to an application.
How to assign an approval flow:
- Navigate to the Access Request policies tab
- Edit the relevant policy
- Choose the specific Approval flow
- Save your changes