|Applies To||RSA Product Set: Identity Governance & Lifecycle|
RSA Version/Condition: 7.0.2, 7.1.0
Intermittently, change requests in RSA Identity Governance & Lifecycle complete but bypass both AFX and manual fulfillment and do not modify the endpoint.
The same change request using the same workflow sometimes works. In this case, the processing workflow of the change request looks like this:
This can happen in the same Change Request where two different change request items show as completed but one provisions to the endpoint and one does not.
|Cause||This issue occurs when the first node is a fulfillment node. In most workflows the first node is an approval node. The first approval or fulfillment node processed will create the sub-processes for the job, But there is a defect reported in ACM-83585 where the fulfillment node does not always create the sub-processes for the job.|
|Resolution||Fixed in 7.0.2 P08 and 7.1.0 P02.|
The workaround is to add a non-operational Approval node as the very first node in your approval workflow. To do this you would add a normal Approval node and set the settings under Behavior to Do Not Process, as shown:
This will essentially create an auto-approval node. The only downside to this would be that the workflow would have a bit more overhead, but not significantly so. This node can be removed once the appropriate patch is installed.