How this workflow is built
1
Trigger
Set a schedule for the workflow to run - for example, every day at 9:00 AM UTC.
2
Get NHI credentials nearing expiry
Define the expiry window that qualifies a credential for this workflow - for example, Expires within 14 days - and optionally scope it to specific application instances.
3
Send Notifications
Notify the credential’s owner - for example, by email and Slack - with enough time to rotate it before it expires.
4
Escalate if not rotated
If the credential hasn’t been rotated by a set point before expiry, escalate the notification to the owner’s manager or an admin.

