RSA Identity Governance and Lifecycle accounts linked to identities based on key identity attributes do not unlink when these identity attribute values change

3 years ago

Originally Published: 2017-05-02

Article Number

000064346

Applies To

RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.0 P01-P03, 7.0.1 , 7.0.2

Issue

You have account collectors which collect accounts and their account mappings. User resolution is mapped to one of the user attributes as shown below and collections to collect accounts have been run.

Now suppose you have changed the value of the above mapped user attribute. The default behavior should be that the collector should unmap the resolution since its a different value and orphan the account. However, this is not happening in RSA Identity Governance and Life cycle 7.0 and above. This is working fine up to and including version 6.9.1; that is, accounts are orphaned when the user resolution attribute values are changed.

Cause

This behavior is a bug (ACM-66204).

Resolution

Fixed in RSA Identity Governance and Lifecycle 7.0.1 P03, 7.0.2 P02. Upgrade to any of these versions to have this issue fixed.

Don't see what you're looking for?

Related Articles

Trending Articles