000035117 - RSA Identity Governance and Lifecycle accounts linked to identities based on key identity attributes do not unlink when these identity attribute values change

Document created by RSA Customer Support Employee on May 9, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035117
Applies ToRSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.0 P01-P03, 7.0.1 , 7.0.2
IssueYou have account collectors which collect accounts and their account mappings. User resolution is mapped to one of the user attributes as shown below and collections to collect accounts have been run.
User-added image

Now suppose you have changed the value of the above mapped user attribute. The default behavior should be that the collector should unmap the resolution since its a different value and orphan the account. However, this is not happening in RSA Identity Governance and Life cycle 7.0 and above. This is working fine up to and including version 6.9.1; that is, accounts are orphaned when the user resolution attribute values are changed.
User-added image

User-added image
User-added image

User-added image

User-added image

CauseThis behavior is a bug (ACM-66204).
ResolutionFixed in RSA Identity Governance and Lifecycle 7.0.1 P03, 7.0.2 P02. Upgrade to any of these versions to have this issue fixed.