Controlling multiple account prompting in Global Forms for RSA Identity Governance & Lifecycle 7.1
Originally Published: 2018-09-20
Article Number
Applies To
RSA Version/Condition: 7.1.0
Issue
As of version 7.1.0 P 01, change request behavior has been changed to enforce the paradigm of having all access be associated with an account when possible.
Release notes show:
User access requests for entitlement changes apply the following rules:
- User entitlement changes that require accounts are always account changes.
- User entitlement changes with no assigned accounts remain user changes.
- User entitlement changes with one assigned account are created as account changes.
- User entitlement changes with multiple assigned accounts prompt for account selection and are created as account changes.
Resolution
An additional change is provided in 7.1.0 P 03 which will further reduce account prompts if accounts are collected to a Directory and then just mapped to users by the application's account collector(s). In this case, when the Once per business source option is selected, then the Business Source is the Directory and would only prompt once, even though the accounts could be mapped to many applications.
Beware of making collector changes to take advantage of the Directory account collection. It can cause a one-time long-running Indirect Relationship Processing run.
