Project

General

Profile

Actions

Task #539

closed

Inactive system fills provisioning queue

Added by Marcel Poul almost 7 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Provisioning
Target version:
Start date:
06/26/2017
Due date:
% Done:

100%

Estimated time:
Owner:

Description

When system is inactive, it still fills the provisioning queue. It is known behaviour, but in common usecases, you won't use it.
Much better would be following behaviour:

Inactive system will do Account management for preparing account with uid, other attribute transformation for provisioning will not executed, as well as no operation fill the provisioning queue.
This feature we would use pretty often - e.g. during system synchronization (other systems set as inactive).


Related issues

Related to IdStory Identity Manager - Feature #1655: Enable synchronization for the system marked as inactive with provisioning queueClosedRadek Tomiška05/15/2019

Actions
Related to IdStory Identity Manager - Defect #1859: Password on target system cannot be changed until the first provisioning occursClosedRadek Tomiška09/18/2019

Actions
Related to IdStory Identity Manager - Defect #2433: Password change failed for accounts without system entityClosedRadek Tomiška08/12/2020

Actions
Actions #1

Updated by Marcel Poul almost 7 years ago

  • Subject changed from Active system fills provisioning queue to Inactive system fills provisioning queue
Actions #2

Updated by Ondřej Kopr almost 7 years ago

  • Assignee changed from Ondřej Kopr to Radek Tomiška
Actions #3

Updated by Radek Tomiška almost 7 years ago

  • Category changed from Feedback to Provisioning
Actions #4

Updated by Marcel Poul almost 7 years ago

We discussed this with Petr Fiser and find one possible usecase for the current behaviour of inactive system: When there is some malfunction of stoppage of managed system that has loooong timeouts , we would use inactive checkbox to prevent all communication with it. But this usecase is so rare that I do not believe, we would ever come across it.

Actions #5

Updated by Radek Tomiška almost 7 years ago

  • Priority changed from Normal to Low
  • Target version set to Diamond (7.4.0)

This was the main requirement to inactive system - even read operations cannot be executed, because target system is offline (e.g. for maintenance reason).

Actions #6

Updated by Vít Švanda over 6 years ago

  • Target version deleted (Diamond (7.4.0))
Actions #7

Updated by Radek Tomiška almost 5 years ago

  • Status changed from New to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • Target version set to Quartz (9.6.0)
  • % Done changed from 0 to 90

I implemented new feature - disabled provisioning on the system. Is the new configuration property on the system detail. System with disabled provisioning doesn't put an operation into queue - just ACM is called and IdM account with uid attribute is created only. System with disabled provisioning is not available for a password change.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/715c6fab2699b05d2fe692c2f3ee844bd98dcb0a

Note: Disabled (~inactive) system behavior is leaved unchanged (~offline system).

Documentation remains.

Actions #8

Updated by Radek Tomiška almost 5 years ago

I improved form on GUI, inactive field is enum selectbox now:
https://github.com/bcvsolutions/CzechIdMng/commit/7b95675bb94cbb9d6ea835e1e35320da81f93820

Actions #9

Updated by Vít Švanda almost 5 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • Priority changed from Low to Normal
  • % Done changed from 90 to 100

I made review, it works perfectly, thanks for that.

Actions #10

Updated by Radek Tomiška almost 5 years ago

  • Status changed from Resolved to Closed
Actions #11

Updated by Radek Tomiška almost 5 years ago

  • Description updated (diff)
Actions #12

Updated by Radek Tomiška almost 5 years ago

Actions #13

Updated by Radek Tomiška almost 5 years ago

  • Related to Feature #1655: Enable synchronization for the system marked as inactive with provisioning queue added
Actions #14

Updated by Radek Tomiška over 4 years ago

  • Related to Defect #1859: Password on target system cannot be changed until the first provisioning occurs added
Actions #15

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2433: Password change failed for accounts without system entity added
Actions

Also available in: Atom PDF