RSA Identity Governance & Lifecycle Attribute Change Rule for Managed Attributes with argument "Set to old value of" does not update attributes correctly.

[#1]

Article Number

000036293

Applies To

RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition:  6.9.1, 7.0.0, 7.0.1, 7.0.2, 7.1.0

 

Issue

RSA Identity Governance & Lifecycle Attribute Change Rule for Managed Attributes with the argument Set to old value of does not update attributes correctly.   An Attribute Change Rule for Managed Attributes with the argument Set to old value of sets the attribute value correctly only for the first user matched by the rule. For other users matched by the rule the attribute value is not updated and retains its original value.   This may be reported by users as the Attribute Change Rule failing intermittently.

Cause

This issue will occur if more than one user matches the Attribute Change Rule.   The system compares the current value of the attribute with the last collected value of the attribute correctly only for the first user.  

Resolution

This issue is resolved in the following patches.

• RSA Identity Governance & Lifecycle 6.9.1:  Please upgrade to a supported version.
• RSA Identity Governance & Lifecycle 7.0.0:  Please upgrade to 7.0.2 or 7.1.0 and apply the appropriate patch.
• RSA Identity Governance & Lifecycle 7.0.1:  Please upgrade to 7.0.2 or 7.1.0 and apply the appropriate patch.
• RSA Identity Governance & Lifecycle 7.0.2:  Resolved in 7.0.2 P07.
• RSA Identity Governance & Lifecycle 7.1.0:  Resolved in 7.1.0 P01.

 

Workaround

There is no known workaround for this issue.   The issue only occurs for Attribute Change Rules where the Action is Update managed attribute value and the operator is Set to old value of.  Try to avoid rules that use this action type. 

Image description

Notes

Note that the Rule fires correctly, it is only the values that are set incorrectly.  Other attribute changes managed by the Rule other than those specified are not affected.