Project

General

Profile

Actions
Copy link

Task #513

closed

Identity account agenda displays wrong account - system mapping

Added by Jan Helbich almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Account managment
Target version:
Citrine (7.3.0)
Start date:
06/15/2017
Due date:
% Done:

100%

Estimated time:
Owner:

Description

Please take a look at attached image.
I have role "ISOP-uzivatel" - assigns system "ISOP - uzivatele" and role "LDAP" - assigns system "LDAP - uzivatele". UIDs are the same for both systems. Therefore I'd expect the user to have 2 accounts (corrects), which point to both systems - fails here and shows only ISOP - uzivatele.

The really strange thing here is that sometimes this does not happen and account are displayed right.

Files

Download all files
ucty.png (17.5 KB) ucty.png Jan Helbich, 06/15/2017 02:15 PM
accounts.png (25.5 KB) accounts.png Jan Helbich, 06/21/2017 08:40 AM

Related issues

Related to IdStory Identity Manager - Task #243: Identity profile - account listClosedVít Švanda12/15/2016

Actions
Actions
Copy link
 #1

Updated by Jan Helbich almost 7 years ago

Another weird usecase:
I had protected mode on a system (LDAP), clicked: Users -> myuser@example -> Accounts -> select account -> remove. Now the account fell into the protected mode.
The user had 2 contracts, both have automatic role (LDAP - user) assigned, therefore the user now has 2 roles LDAP-user and 1 LDAP account in protected mode. So far so good.
Now I wanted to force IdM to cancel the protection on the account, therefore I've added another LDAP-user role to my user. As a result, the protected mode was cancelled (good), but there are 3 account displayed now in the agenda (bad). Please take a look at attached screenshot.

Actions
Copy link
 #2

Updated by Vít Švanda almost 7 years ago

  • Assignee changed from Vít Švanda to Radek Tomiška
Actions
Copy link
 #3

Updated by Radek Tomiška almost 7 years ago

  • Related to Task #243: Identity profile - account list added
Actions
Copy link
 #4

Updated by Radek Tomiška almost 7 years ago

  • % Done changed from 0 to 10

I've reproduced the second scenario - this is correct behavior, i think, because identity accounts are shown in the identity accounts table - relations to accounts (see #243) and you have three roles at the end.

I continue with the first scenario.

Actions
Copy link
 #5

Updated by Radek Tomiška almost 7 years ago

  • Status changed from New to In Progress
  • Assignee changed from Radek Tomiška to Jan Helbich

I'm not able to reproduce the first scenario. Had you roles assigned by automatic role or manually or account was created manually?

Actions
Copy link
 #6

Updated by Radek Tomiška almost 7 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Jan Helbich to Vít Švanda
  • Target version changed from Diamond (7.4.0) to Citrine (7.3.0)
  • % Done changed from 10 to 90

After some consultation with Honza and Marcel (thx for them), i was able to reproduce all issues:
- fixed: identity accounts were not created for all identity roles on the same role and target system - i've moved check to different stream (we could find better place, when review will be done)
- fixed: identity accounts was assigned to random target system (restriction to target system in account mapping was missing)

Could you pls do a test and review?

Actions
Copy link
 #7

Updated by Vít Švanda almost 7 years ago

  • Status changed from Needs feedback to Closed
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

Now works fine.
Thanks for fix this my bugs (it had to be hard to find the cause).

Actions
Copy link

Also available in: Atom PDF