000036491 - RSA Identity Governance & Lifecycle Access Fulfillment Express (AFX) Change Requests that depend on Entitlements Require Account are stuck in a "Waiting On Dependencies" state

Document created by RSA Customer Support Employee on Jul 3, 2018Last modified by RSA Customer Support Employee on Jul 7, 2018
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000036491
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.1.0
IssueRSA Identity Governance & Lifecycle Access Fulfillment Express (AFX) Change Requests that have Entitlements Require Account enabled show that the Create Account activity is in a Completed state, but the dependent items such as the Add Account to Group remain stuck in the Waiting On Dependencies state.  
User-added image

The workflow shows that the dependent items are in the Calculate Items To Work On node which is in an Active state:
User-added image
CauseThis issue only affects AFX fulfillment workflows that contain the Java node Calculate Items To Work On.  This issue does not affect the Default AFX Fulfillment workflow shipped with RSA Identity Governance & Lifecycle 7.1.0 or workflows based on the 7.1 version of this workflow.   This issue does affect workflows created on an earlier version of RSA Identity Governance & Lifecycle, or based on an earlier version of the Default AFX Fulfillment workflow.

This problem is caused by the Alert on the Calculate Items to Work On node being incorrectly assigned to the wrong WorkPoint Alert queue.   
ResolutionThis issue is resolved in RSA Identity Governance & Lifecycle 7.1.0 P02 which includes an updated workflow migration utility script that runs during the application of the patch that modifies problem workflows to correct the issue.

WorkaroundFor workflows on RSA Identity Governance & Lifecycle 7.1.0 GA or RSA Identity Governance & Lifecycle 7.1.0 P01 that exhibit this problem, the migration script ACM-88269.sql may be run manually as a repair script on affected systems under the guidance of RSA Customer Support to correct any problem workflows. 

Please contact RSA Customer Support for a copy of this script and guidance on how to use it.

This issue only occurs if the Workflow is configured with the Select the grouping of changes set to either:
  • Create an individual job for each change or
  • Create a job per group, grouping by. 
You may also work around this issue by selecting Create one job to process all changes in the Workflow editor. 
User-added image

This issue affects workflows that are exported and imported as metadata from one instance of RSA Identity Governance & Lifecycle 7.1.0 to another. In environments where customers are exporting workflows from one instance and importing into another, customers should ensure that all environments are patched or that the repair script is run on all instances to avoid reintroducing workflows that have this issue into new machines.