Unification slow and identity collections show users in reprocessed state in RSA Identity Governance & Lifecycle

[#1]

Article Number

000037204

Applies To

RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.1.0, 7.0.2. 7.0.1
 

Issue

The RSA Identity Governance &  Lifecycle Identity Collector (IDC) shows many users in a Changed state even though no attributes for the user have changed. 

In the Task Results for the Collection Run there are a large number of users in the Reprocessed column. 

Image description

The RSA Identity Governance & Lifecycle Identity Unification takes longer than expected to complete.

If you select the Identity Data Unification run under the Data Runs tab under the Admin Monitoring menu for the unification run.   Under Task Results it shows that a large number of users under the Changed column.

Image description

If you view the Database Logs for Run for the Unification run you will see the task "Find/reprocess objects with unresolved Business Units" is processing all of the users. 
 

61182   3            SourceDataTables          Do_Delta            INFO     		2/20/2019 5:06 35093 rows processed
61181   3            SourceDataTables          Do_Delta            SQLTEXT          2/20/2019 5:06 	Find/reprocess objects with unresolved Business Units

Cause

This issue may occur in new installations where the RSA identity collectors are collecting attributes to define a business unit but the business units have not been set up under the Users > Business Users menu.

During unification RSA Identity Governance & Lifecycle will attempt to resolve the business units for the collected users.  If no business units have been defined, this process will run every time Unification is run and will attempt to update the business unit for every user.  This is considered an change to the user status and counts as a change to the user. 

Resolution

Refer to the Online Help for "Creating Business Units" where it states that business units must be defined before running data collectors. 
 

Creating Business Units

To associate users and assets with a business unit, you must create it in RSA Identity Governance and Lifecycle before you run identity collection and other data collections.

Notes

See the following article for additional information on processing business units after configuration:  Users are not assigned to new RSA Identity Management and Governance and Lifecycle business unit after collection