Looping fulfillment workflows cause multiple issues in SecurID Governance & Lifecycle

[#1]

Article Number

000067880

Applies To

SecurID Governance & Lifecycle 7.5.2
RSA Identity Governance & Lifecycle 7.5.0, 7.2.1, 7.2.0, 7.1.1

Issue

Fulfillment workflows including but not limited to the "Default AFX Fulfillment" workflow show a very high count for the number of loops in each transition.  The workflow does not wait at the Calculate Items to Work On node.

The AFX database located at /home/oracle/AFX/activemq/data/kahadb/db.data may grow very large.

Workpoint may become slow or the CPU load on the server may increase.

Cause

A change in the way the watches were created for the Calculate Items to Work On workflow node causes the "Default AFX Fulfillment" workflows and other fulfilment workflows to loop continuously.  Until the fulfilment is completed, this can cause a variety of issues.

This is a known issue in the following versions:

• SecurID Governance & Lifecycle 7.5.2
• RSA Identity Governance & Lifecycle 7.5.0
• RSA Identity Governance & Lifecycle 7.2.1 P01
• RSA Identity Governance & Lifecycle 7.2.0 P05
• RSA Identity Governance & Lifecycle 7.1.1 P10

Resolution

This issue is resolved in the following versions:

• SecurID Governance & Lifecycle 7.5.2 P01
• RSA Identity Governance & Lifecycle 7.5.0 P07
• RSA Identity Governance & Lifecycle 7.2.1 P10
• RSA Identity Governance & Lifecycle 7.2.0 (upgrade to a later version)
• RSA Identity Governance & Lifecycle 7.1.1 (upgrade to a supported version)

Workaround

Notes

This issue was partially resolved in the following patches as per ACM-110810 which introduced a delay.  This solution does not resolve the issue completely and customers should patch to the fix versions noted above.

• RSA Identity Governance & Lifecycle 7.5.0 P04
• RSA Identity Governance & Lifecycle 7.2.1 P07