Change Requests stuck in the AFX Fulfillment Handler Workflow Node and Workflows Stalled in RSA Identity Governance & Lifecycle
Originally Published: 2020-07-07
Article Number
Applies To
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.0
Issue
SYMPTOMS:
- Change requests that provision using AFX are stuck in the fulfillment phase.
- The change request workflows are stuck in the AFX fulfillment handler node.
- Workflows are flagged as stalled.
- AFX requests are stuck in the V state.
Cause
Not enough memory is available to the ActiveMQ queue during heavy processing of bulk Change Request items which causes messages to get stuck in the ActiveMQ queue intermittently impacting AFX processing and Change Request completion.
Resolution
- RSA Identity Governance & Lifecycle 7.1.1 P07
- RSA Identity Governance & Lifecycle 7.2.0 P02
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
Workaround
- Restart the stuck AFX requests, and
- Manually modify the ActiveMQ memory configuration to prevent future occurrences of this issue.
Restart stuck AFX requests:
Open a support ticket with RSA Identity Governance & Lifecycle Support for a workaround and provide the following information in the case:- Login to a SQL tool such as SQL*Plus or SQL Developer as avuser, and
- Execute the following queries:
These queries will determine the AFX request state of the specific stuck change request:
select * from T_AV_CHANGE_REQUESTS CR where NAME like '%stuck-change-request-name%';
Note the values of CR.ID and CR.CURRENT_STATE returned in the query results and substitute them into the next two queries:
select * from T_AV_CHANGE_REQUEST_DETAILS CRD where CHANGE_REQUESTS_ID=<CR.ID> select * from T_AV_AFX_REQUEST where change_item_id=<CRD.ID>
This query will identify any AFX requests in the V state:
select * from t_av_afx_request where state ='V'
Manually modify the ActiveMQ memory configuration:
- Follow the instructions in the attached ActiveMQ_Memory_Changes.docx document.
- Restart AFX as the afx user:
afx restart
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
Workflows stuck in AFX fulfillment and/or Provisioning nodes in RSA Identity Governance & Lifecycle 514Number of Views AFX fulfillment workflow switches to manual fulfillment when using workflow variables in an AFX Connector in RSA Identity … 452Number of Views Change requests provisioned by AFX remain in "pending action" or "pending verification" in RSA Governance & Lifecycle 185Number of Views Change requests generated from rule type "Role Missing entitlements" remain in pending verification status in RSA Identity… 286Number of Views RSA Identity Management and Governance Change request item stays in Pending Verification even after successful collection … 327Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Mandatory Certificate Upgrade Required by 6th October 2025 for RSA MFA Agent for PAM, RSA MFA Agent for Apache, and Third … RSA Authentication Manager 8.9 Release Notes (January 2026)
Don't see what you're looking for?