000037204 - Unification slow and identity collections show users in reprocessed state in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Feb 25, 2019
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000037204
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.1.0, 7.0.2. 7.0.1
 
Issue

The RSA Identity Governance &  Lifecycle Identity Collector (IDC) shows many users in a Changed state even though no attributes for the user have changed. 

In the Task Results for the Collection Run there are a large number of users in the Reprocessed column. 



User-added image





The RSA Identity Governance & Lifecycle Identity Unification takes longer than expected to complete.



If you select the Identity Data Unification run under the Data Runs tab under the Admin Monitoring menu for the unification run.   Under Task Results it shows that a large number of users under the Changed column.



User-added image




If you view the Database Logs for Run for the Unification run you will see the task "Find/reprocess objects with unresolved Business Units" is processing all of the users. 
 




61182   3            SourceDataTables          Do_Delta            INFO       2/20/2019 5:06 35093 rows processed
61181   3            SourceDataTables          Do_Delta            SQLTEXT          2/20/2019 5:06  Find/reprocess objects with unresolved Business Units
CauseThis issue may occur in new installations where the RSA identity collectors are collecting attributes to define a business unit but the business units have not been set up under the Users > Business Users menu.

During unification RSA Identity Governance & Lifecycle will attempt to resolve the business units for the collected users.  If no business units have been defined, this process will run every time Unification is run and will attempt to update the business unit for every user.  This is considered an change to the user status and counts as a change to the user. 
ResolutionRefer to the Online Help for "Creating Business Units" where it states that business units must be defined before running data collectors. 
 

Creating Business Units



To associate users and assets with a business unit, you must create it in RSA Identity Governance and Lifecycle before you run identity collection and other data collections.



 
NotesSee the following article for additional information on processing business units after configuration:  Users are not assigned to new RSA Identity Management and Governance and Lifecycle business unit after collection

Attachments

    Outcomes