Delete a duplicate user or duplicate group and run a schedule cleanup job when the identity source no longer exists in RSA Authentication Manager 8.x
Originally Published: 2012-11-27
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 7.1, 8.x
Issue
Adding a user with the same user ID gives the following error message
There was a problem processing your request.
Cannot add or manage a user with user ID <user ID>. Your deployment is configured to not allow duplicate user IDs in a realm. This user ID is already in use by an unresolvable user in this realm.
For more information, see the Troubleshooting appendix in the Administrator's Guide.
Unable to connect to LDAP Identity Source
Skipping identity source: 1acf46bc2cf7b50a03897609cbd4d0ff (myidentitysource.com Unable to run the cleanup job because the of the error LDAP_CONNECTION_FAILED
Skipping identity source: 1acf46bc2cf7b50a03897609cbd4d0ff (myidentitysource.com Unable to run the cleanup job because the of the error LDAP_CONNECTION_FAILED
com.rsa.ims.admin.dal.ldap.ConnectionException: Error connecting to the identity source
The following identity sources were unavailable while generating the list of unresolvable users if you want to clean up users from all your identity sources, make sure that all identity sources are available and configure settings again
Resolution
- Login to the Operations Console
- Edit the Identity Source that was deleted
- On the Connection(s) tab change the LDAP URL connection strings to be that of ANY valid LDAP directory. The important thing is that a test connection should be successful
- On the Map tab, make sure that that the User Base DN and User Group Base DN values point to values that exist in our LDAP directory
- Under Directory Configuration- Users, change the search filter to a value that will produce NO results. For example:
(&(objectClass=User)(objectcategory=person)(cn=XYZABC123))
- Under Directory Configuration - User groups, change the seach filter to a value that will produce no results. For example,
(&(objectClass=group)(cn=XYZABC123))
- Save the settings.
- Login to the Security Console and navigate to Setup > Identity Sources > Clean Up Unresolveable Users.
- Select the identity source from the drop down list.
- To remove the Grace Period, uncheck the option.
- Click Next.
- All users in the identity source will be displayed and can now be deleted.
- Login to the Operations Console.
- Edit the Identity Source that contains the user you wish clean up
- On the Connection(s) tab.Verify the the LDAP URL connection strings are correct. The important thing is that a test connection should be successful.
- On the Map page, make sure that that User Base DN and User Group Base DN values point to values that exist in our LDAP directory/
- OPTIONAL IF ONLY DELETING A USER. Under Directory Configuration- Users, change the search filter to a value that will exclude the user we wish to cleanup. For example,
(&(objectClass=User)&(objectcategory=person)&(!(sAMAccountName=myuser)))
- OPTIONAL IF ONLY DELETING A GROUP. Under Directory Configuration - User groups - change the search filter to a value that will exclude the group we wish to cleanup. FOr example,
(&(objectClass=group)&(!(cn=mygroup)))
- Save the settings.
- Go to Security Console and navigate to Setup > Identity Sources > Clean Up Unresolveable Users.
- To remove the Grace Period, uncheck the option.
- Click Next.
- User myuser and/or group mygroup will be scheduled for cleanup
Related Articles
Authentication Manager token assigned to <no access> or <unknown> after user in an external identity source is deleted fro… 242Number of Views Duplicate User ID error when running All Users report in RSA Authentication Manager 8.x 1.63KNumber of Views Cannot add or manage a user with user ID <UserID>. User IDs must be unique within a deployment. This user ID is already in… 2.01KNumber of Views How to map a RADIUS attribute to a value that equals a user group for access control 432Number of Views A change request to remove role access from a user tries to remove AD group (indirect access from role) which no longer ex… 137Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x
Don't see what you're looking for?