AnsweredAssumed Answered

Naming Policy and Template Pending parameter

Question asked by Steve Alexandre on Jan 9, 2020
Latest reply on Jan 15, 2020 by Ian Staines

Like • Show 0 Likes0
Comment • 6

Hi everyone,

I have two questions :

1- We create a user with a naming policy configured to be unique like "User1". If we delete the user and try to recreate it, the policy should take this 1 again ? (Account is in deleted state)

Because in my case, it's increment everytime and never take back the counter.

2- For moment with my first question, I have defined my own increment system in the workflow but for your case, it's on the Account Name so how can I configured the pending parameter of the account template to be the dynamic value ?

No one else has this question

Outcomes

6 Replies

Steve Alexandre Jan 13, 2020 9:50 AM
Mark Correct
Correct Answer
Up, anyone from RSA?
Like • Show 0 Likes0
Actions
- Joanna Yang @ Steve Alexandre on Jan 14, 2020 12:53 PM
  Mark Correct
  Correct Answer
  For question two, take a look at this one, it might be what you are looking for:
  Achieve Business Agility - Account Templates and Naming Policies
  Like • Show 0 Likes0
  Actions
  - Steve Alexandre @ Joanna Yang on Jan 15, 2020 8:08 AM
    Mark Correct
    Correct Answer
    Joanna, This is what I'm talking about.
    I'm already using the naming policy associated with the account template but when for example "DOE John1" does not exist anymore in our AD (account deleted and display as deleted in the ADC), the product want to create the user with a 2 where it should take again the 1 unused.
    Like • Show 0 Likes0
    Actions
    - Joanna Yang @ Steve Alexandre on Jan 15, 2020 9:24 AM
      Mark Correct
      Correct Answer
      Yes. I have seen the same issue for the deleted account too.
      Like • Show 0 Likes0
      Actions
      - Ian Staines @ Joanna Yang on Jan 15, 2020 12:18 PM
        Mark Correct
        Correct Answer
        Not strictly related to your questions, but you should be aware of this feature in the product.
        
        000038042 - After upgrading to 7.1.0 P03 or higher, the rehiring process in RSA Identity Governance & Lifecycle is failing to create new accounts for the rehired users
        Like • Show 0 Likes0
        Actions
Ian Staines Jan 15, 2020 12:37 PM
Mark Correct
Correct Answer
Regarding your original question (#1).

I think this is open to interpretation. Our documentation says explicitly that the naming policy will choose "one that has not been collected". English language is ambiguous. A deleted user is not currently collected, however it has been previously collected so this statement is correct in both instances.

You can open a defect for this and an engineering resource will make a determination.

It is clear that the current functionality is to increment the account against deleted users as you found.
Like • Show 0 Likes0
Actions

Naming Policy and Template Pending parameter

Outcomes

Related Content

Recommended Content