Project

General

Profile

Actions

Defect #3442

open

When event for role request fails roles are removed bud accounts remain linked

Added by Vladimír Kotýnek 7 months ago. Updated 7 months ago.

Status:
New
Priority:
Normal
Assignee:
Peter Štrunc
Category:
Account managment
Target version:
-
Start date:
10/03/2023
Due date:
% Done:

0%

Estimated time:
Affected versions:
Owner:

Description

When an error occurres during processing role request that removes some role from the user, roles are removed bud accounts are still linked to the identity. Only a reference to the role is removed from the ling by the request.
I would expect IdM to either not remove the roles or remove links to accounts too.
Example of errors that occurred and caused this situation are:
acc:acc-role-request-realization-processor:

eu.bcvsolutions.idm.acc.exception.ProvisioningException: Generated UID is null (for system [AD])! Account UID must be not null and String value.
    at eu.bcvsolutions.idm.acc.service.impl.AbstractProvisioningExecutor.lambda$prepareMappedAttributesValues$15(AbstractProvisioningExecutor.java:851)

acc:acc-role-request-realization-processor:
org.identityconnectors.framework.common.exceptions.ConnectorSecurityException: javax.naming.CommunicationException: simple bind failed: example.tl:636 [Root exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

No data to display

Actions

Also available in: Atom PDF