Attribute Change Rule not generating Change Requests in SecurID Governance & Lifecycle
Last Modified: 2023-10-06
Article Number
Applies To
RSA Identity Governance & Lifecycle 7.2.1, 7.5.0
SecurID Governance & Lifecycle 7.5.2
Issue
Attribute Change Rule is detecting users as having changed but no Change Request is created to remove or add users to the role.
The Attribute Change Rule shows the following message indicating that the Rule was run correctly:
Number of existing users whose attributes changed: xx
The following message is logged in aveksaServer.log file:
05/25/2021 03:13:09.780 ERROR (Exec Task Consumer#0 - Sequence) [com.aveksa.server.core.rule.RuleServiceUtil] Error method=Action com.aveksa.server.core.rule.action.changerequest.ChangeRequestAction@3f8943e com.aveksa.server.core.AdminServiceException: java.lang.IllegalArgumentException: Comparison method violates its general contract!
Cause
This is a known issue in the following versions. The issue was caused by a problem with the way entitlements for application roles were sorted.
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
- SecurID Governance & Lifecycle 7.5.2
Resolution
- RSA Identity Governance & Lifecycle 7.2.1 P08
- RSA Identity Governance & Lifecycle 7.5.0 P05
- SecurID Governance & Lifecycle 7.5.2 P01
Related Articles
RSA Identity Governance and Lifecycle Attribute change rule not detecting changes in terminated users Number of Views How to access the Run Database Logs in RSA Identity Governance & Lifecycle Number of Views Duplicate Local Entitlements may occur when Provisioning Local Entitlements through Manual Activities in RSA Identity Gove… Number of Views Attribute change rule creating duplicate change items for users having more than one account with same entitlement in an a… Number of Views Attribute Change Rule reverts to a previous version after making changes in RSA Identity Governance & Lifecycle Number of Views
Trending Articles
Don't see what you're looking for?
