Duplicate entitlements are created when an Application has 'Complete Manual Activity Before Collection' enabled in RSA Identity Governance & Lifecycle
4 years ago
Originally Published: 2017-06-08
Article Number
000065205
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.0.0, 7.0.1, 7.0.2
 
Issue
When manually adding entitlements to a user through the user interface where the Application is defined with Complete Manual Activity Before Collection set to Yes (Resources > Applications > General tab), the entitlements are duplicated after running the entitlement collectors.

EXAMPLE
 
In this example, application APP1 has Complete Manual Activity Before Collection set to Yes.
 
User-added image

The app-role Bug is manually added to Cherry Blossom prior to the APP1 entitlement collection run
 
User-added image

After the entitlement collection run, the app-role is now duplicated in the user's access screen. (Users > Users > {user name} > Access tab).
 
User-added image


NOTE: The Complete Manual Activity Before Collection feature is used when an application can only be collected on a very infrequent basis and there is a need to add entitlements to a user prior to when the collection can be run.

Cause
This is a known issue reported in engineering ticket ACM-71714.
 
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle versions and patch levels:
  • RSA Identity Governance & Lifecycle 7.0.1 P03
  • RSA Identity Governance & Lifecycle 7.0.2 P01
  • RSA Identity Governance & Lifecycle 7.1.0