Attribute Change Rule not generating Change Requests in SecurID Governance & Lifecycle

[#1]

Article Number

000067900

Applies To

RSA Identity Governance & Lifecycle 7.2.1, 7.5.0
SecurID Governance & Lifecycle 7.5.2

Issue

Attribute Change Rule is detecting users as having changed but no Change Request is created to remove or add users to the role.

The Attribute Change Rule shows the following message indicating that the Rule was run correctly:

Number of existing users whose attributes changed: xx

The following message is logged in aveksaServer.log file:

05/25/2021 03:13:09.780 ERROR (Exec Task Consumer#0 - Sequence) [com.aveksa.server.core.rule.RuleServiceUtil] Error method=Action com.aveksa.server.core.rule.action.changerequest.ChangeRequestAction@3f8943e 
com.aveksa.server.core.AdminServiceException: java.lang.IllegalArgumentException: Comparison method violates its general contract!

Cause

This is a known issue in the following versions. The issue was caused by a problem with the way entitlements for application roles were sorted.

• RSA Identity Governance & Lifecycle 7.2.1
• RSA Identity Governance & Lifecycle 7.5.0
• SecurID Governance & Lifecycle 7.5.2

 

Resolution

This is resolved in the following versions:

• RSA Identity Governance & Lifecycle 7.2.1 P08
• RSA Identity Governance & Lifecycle 7.5.0 P05
• SecurID Governance & Lifecycle 7.5.2 P01