In some circumstances, primarily where two different versions of Active Roles been run in a side-by-side configuration for a period of time, there may be a mismatch between deprovisioning options within these two systems.
This can be rectified by copying deprovisioning information from Virtual Attributes in the old Active Roles instance to Virtual Attributes in the new Active Roles instance.
Deprovisioning information is stored in several Virtual Attributes. Primary among these are:
WORKAROUND
The edsvaDeprovisionReportXML attribute is generated based off of the Management History. In order for this attribute to be populated, it is necessary to run the Management History Import option in the Active Roles Configuration Center.
A custom Workflow in the Active Roles Synchronization Service or Quick Connect can be configured to copy values of the edsvaDeprovisionStatus and edsvaDeprovisionDeletionDate attributes from one instance of Active Roles to another.
NOTE: In order for a single Active Roles Synchronization Service or Quick Connect instance to be able to communicate to more than one Active Roles Administration Service instance, it is necessary to use a Remote Connector for every Active Roles instance beyond the first one.
STATUS
Enhancement Request 434563 has been created to add an Import Virtual Attributes wizard into the Active Roles Configuration Center, similar to the existing Import Configuration and Import Management History wizards.
Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release.
For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center