RSA Identity Governance and Lifecycle accounts linked to identities based on key identity attributes do not unlink when these identity attribute values change
2 years ago
Originally Published: 2017-05-02
Article Number
000064346
Applies To
RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.0 P01-P03, 7.0.1 , 7.0.2
 
Issue
You have account collectors which collect accounts and their account mappings. User resolution is mapped to one of the user attributes as shown below and collections to collect accounts have been run.
 
User-added image

Now suppose you have changed the value of the above mapped user attribute. The default behavior should be that the collector should unmap the resolution since its a different value and orphan the account. However, this is not happening in RSA Identity Governance and Life cycle 7.0 and above. This is working fine up to and including version 6.9.1; that is, accounts are orphaned when the user resolution attribute values are changed.
 
User-added image

User-added image
User-added image
User-added image
User-added image

 
Cause
This behavior is a bug (ACM-66204).
Resolution
Fixed in RSA Identity Governance and Lifecycle 7.0.1 P03, 7.0.2 P02. Upgrade to any of these versions to have this issue fixed.