|Applies To||RSA Product Set: RSA Identity Governance & Lifecycle |
RSA Version/Condition: 7.0.2, 7.1.0
|Issue||Intermittently, change requests in RSA Identity Governance & Lifecycle complete but bypass both AFX and manual fulfillment and fail to modify the endpoint. |
When this occurs, the processing workflow of the change request may be missing the sub process nodes as in the example below.
The same change request using the same workflow sometimes works. In this case, the processing workflow of the change request contains the expected sub process nodes as in the example below.
Please refer to RSA Knowledge Base Article 000030327 -- Artifacts to gather in RSA Identity Governance & Lifecycle to find the location of the aveksaServer.log file for your specific deployment.
|Cause||This issue may occur if the first node of the request workflow is a fulfillment node instead of an approval node. |
Although the main workflow items associated with the change request are created immediately, the sub-processes for the workflow are instantiated when Workpoint encounters the fulfillment node in the workflow. In a typical workflow, the request will pause at the approval node before moving on and this allows time for the main workflow to be created before the sub processes are created. In some instances, if there are performance issues, the system may not have time to create all the sub processes correctly. This may affect some or all of the items in the request.
|Resolution||This issue is resolved in the following versions:|
|Workaround||The workaround is to add a non-operational (dummy) approval node as the very first node in your approval workflow. To do this you would add a normal approval node and set the settings under Behavior to Do Not Process, as shown:|
This will essentially create an auto-approval node. The only downside to this would be that the workflow would have a bit more overhead, but not significantly so. This node may be removed once the appropriate patch is installed.