RSA Identity Governance and Lifecycle - Can you map an account to a specific user through Web Services
2 years ago
Originally Published: 2019-05-30
Article Number
000043951
Applies To
RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.x
 
Issue
This payload in Web Services:
 
<Changes>
<AccountChange>
        <Operation>Map</Operation>
        <User>User123</User>
        <Account>Acc321</Account>
        <BusinessSource>My Directory</BusinessSource>
</AccountChange>
</Changes>

will correctly create a Change Request, but Fulfillment will fail in the AFX Fulfillment with
 
AFX will not handle this item because the command 'AddUserToAccount(AddUserToAccount)' is not supported on endpoint 'My Directory Connector'

and move to manual fulfillment and the account changes will show 'Pending Action'.

The above error can be found in the node icon under account changes.

 
Cause
At present (7.1.1) Afx is not capable of doing 'AddUserToAccount'
Resolution
At present (7.1.1), there is no ootb solution.
Workaround
At present (7.1.1) a customized solution would need to be implemented for this.