000034645 - RSA Identity Governance and Lifecycle Access Fulfillment Express (AFX) command output parameters do not work if the attribute name contains spaces

Document created by RSA Customer Support Employee on Jan 13, 2017Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000034645
Applies ToRSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.0, 7.0.1
IssueIn the AFX (Access Fulfillment Express) connector settings, if a command output parameter is used and mapped to a local attribute that contains a space in its name (i.e., External ID, Account Path, Distinguished Name, etc.), the value is not written to the mapped attribute and any dependent subsequent changes in the workflow fail.

Steps to reproduce the issue

  1. Setup an Active Directory as a directory.
  2. Under Requests link any simple Account template with a pending parameter Name and choose Entitlements require an Account.
  3. Setup an AD AFX connector.
  4. Under Create Account capability, add a command output parameter to read the distinguishedName and map it to any attribute that has spaces in its name (for example: External ID):
User-added image

  1. Now in the capability Add Account to Group, use the same attribute used above as the "Account" Parameter.
User-added image

  1. Create a change request to add an AD Group to any user that does not yet have an AD account.

Expected behavior

  • CR created with two items, create account then add group to account. Both items are fulfilled by AFX and then wait for verification

Actual behavior

  • CR created with two items, create account then add group to account. Create account is successful, but Add group to account fails.

User-added image


User-added image

User-added image

CauseThe root cause of the issue is under investigation by RSA Engineering (ACM-64806).  
ResolutionSince the issue is under investigation, no resolution is available as of now.  Please contact RSA Support for the status of ACM-64806.

Access the RSA Identity Governance and LIfecycle portal.  Go to Admin > Attributes and remove the space in the attribute name used in the AFX output parameter or use the parameter that doesn't contain any spaces.

An example of a scenario where attribute name has no space follows:

1. Choose another attribute that does not have any spaces in its name and use it as the output parameter (for example, DN).

User-added image

User-added image

  1. Create another similar CR. This time changes will be fulfilled as expected.

User-added image