Article Number
000038329
Applies To
RSA Product Set: SecurID
RSA Product/ Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
Unable to unassign tokens from users. The following error shows in the Security Console:
"There was a problem processing your request.
Unexpected error during command com.rsa.authmgr.admin.tokenmgt.UnlinkTokensFromPrincipalsCommand execution"
When searching for the user it appears with no assigned tokens, however the token appears as assigned under
Authentication >
SecurID Tokens.
Cause
This error happens when an identity source is unlinked and deleted without performing a clean up job. RSA recommends scheduling a cleanup before deleting an identity source from the Operations Console.
Resolution
A scheduled clean up job should be performed using the steps below:
- In the Security Console, click Setup > Identity Sources > Schedule Cleanup.
- To schedule the cleanup job to run, under Cleanup Status, select Enable scheduled cleanup of unresolvable users and user groups from linked identity sources, and all users and user groups from unlinked identity sources.
- Make sure to leave the Grace Period Field unchecked.
- Under Schedule, use the Start, Frequency and Run Time fields to select the date and time on which you want the cleanup to run.
Make sure after the clean up job is completed that the token exists in the unassigned tab under Authentication > SecurID Tokens > Manage Existing
