Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Fixed

Time Offset Flag didn't re-evaluate when date threshold was passed

Adrian Corston 4 years ago in UNIFYBroker Service updated 3 years ago 21

I have the following Time Offset Flag adapter transformation configured:

Image 5989

For the problematical entity the EndTimestampUTC field is "4/22/2021 12:00:00 PM" (i.e. midnight at the start of April 23rd in my customer's timezone - NZ), so the corresponding UTC timestamp for the threshold comparison should be "5/7/2021 12:00:00 PM" (i.e. midnight at the start of May 8th in NZ timezone).  EndTimestampUTC was changed to that value on May 7 (i.e. before UTC 5/7/2021 12:00:00 PM) but even though today is now May 10th the PostEndPlus14 field hasn't been re-evaluated to "Yes" as I would have expected (i.e. transition from the ">" case to the "<" case).

Image 5990

To allow a better chance to debug I have not run a Generate Changes on the adapter yet.

0
Answered

How soon will temporal transformations (e.g. Time Offset) be re-evaluated after the current date and time changes?

How soon will temporal transformations (e.g. Time Offset) be re-evaluated after the current date and time changes?

0
Fixed

Baseline Sync calling connector entity update for all entities even when there are no value changes

Adrian Corston 4 years ago in UNIFYBroker/Plus updated by Matthew Davis (Technical Product Manager) 1 month ago 4

When a Baseline Sync runs on a link the connector's update export functionality is called to update every entity, even when there are no field value changes.  This places an unnecessary load on UNIFYBroker and performs null updates against the external system for no discernible reason, and since UNIFYBroker/Plus is unable to sync any other links while this takes place can result in unnecessary processing delays while the connector is busy effectively doing nothing.

Answer

This has been implemented and is available in the release of UNIFYConnect V6, which will be made available shortly.

Internal value comparison happens on assignment of a value to an entity schema field, so while the workaround provided by Shane above would still help, the engine performs the same check on assignment as well.

0
Completed

Return a more helpful error when an adapter accessed via ODATA is not enabled

Adrian Corston 4 years ago in UNIFYBroker Service updated by Matthew Davis (Technical Product Manager) 1 month ago 3

When an non-enabled adapter is queried via ODATA the endpoint returns a 404 error.  A different error with some descriptive text would make it easier to work out what has gone wrong.

Answer

This has been implemented and is available in the release of UNIFYConnect V6, which will be made available shortly.

0
Answered

Duplicated join target for NULL field value where there is no target with that field value

Adrian Corston 4 years ago in UNIFYBroker/Plus updated 4 years ago 6

I am seeing: Baseline synchronization failed with the message "Source entity 'b5d56da5-a8af-4088-b98c-4b78a693b093' shares a join target with another source entity: 'fa457ecd-b5a7-4708-886b-747ca82da40a'. Cannot proceed with join.". See logs for more details.

Both source entity have a join field value of NULL, and there are no target entities with a join field value of NULL.

I tried deleting entities and reloading them, but the error remains. The mapping of field values through to other locker entities is not happening, and I would like to know if the join failure is the cause of this.

Answer

Hi Adrian

As the error message says, both of those source entities have the same join target, which may or may not exist until provisioning occurs. If the schema fields you're using can contain nulls and you want the sync to progress I'd recommend adding a Has Value filter on the join fields.

0
Completed

PowerShell connector operation timeout

Adrian Corston 4 years ago in UNIFYBroker Service updated by Matthew Davis (Technical Product Manager) 1 month ago 3

Add a feature to allow a timeout to be specified for a PowerShell connector operation (Import All, etc).  When the timeout expires, forcibly kill the PowerShell operation and log an error.

This came up because a connector hung for ten days in a UNIFYConnect environment until I noticed.  All of the other connectors in the same connector exclusion group were blocked from running as well.  I suggest a default timeout of one hour for most operations and 10 minutes for Import Changes.

Answer

This has been implemented and is available in the release of UNIFYConnect V6, which will be made available shortly.

0
Planned

Updating Google Connector Resets Agent

Liam Schulz 4 years ago in UNIFYBroker/Google Apps updated by Matthew Davis (Technical Product Manager) 2 years ago 1

Hi,

Recently we ran into an issue with the Google Apps Connector where going into update the connector properties would set the agent to another rather than keeping the original value.

Image 5979

Image 5978


This caused an issue where we saved the connector without realizing the agent had been changed, causing the connector to import from another domain.

We can make sure the agent is set correctly before we make any updates, but it would be useful to have this behavior changed to avoid any issues accidents in future. Google Connector version is 5.3.2.0

Thanks

0
Under review

Test Connection operation for PowerShell connectors

Adrian Corston 4 years ago in PowerShell connector updated by Matthew Davis (Technical Product Manager) 1 month ago 1

Most UNIFYBroker agents have a Test Connection operation, but this can't be configured for PowerShell connectors.  This morning my customer's PowerShell connectors were failing because Azure was reporting the MS Graph API to be overloaded and only accepting admin connections (“53300: remaining connection slots are reserved for non-replication superuser connections”).

Add a Test Connection facility to a PowerShell connector.  This would tie in with https://voice.unifysolutions.net/en/communities/6/topics/4220-scheduled-execution-of-test-connection-on-agents

0
Answered

Google group membership exports

I have an environment where we are noticing some membership disparities for some google groups that are failing on export. My question around this is when a group membership fails to update for whatever reason, will the export process continue and try to amend the remaining membership changes for that group? Or will it simply throw the error back to MIM and move on to the next group in the export? UNIFYBroker and the Google Connectors are at the latest versions.

Thank you

Answer

The latter, the group update does not continue, and moves onto the next group.

0
Not a bug

Connection-aware join not persisting for outgoing link when join criteria field value changes - new adapter entity is created and old one is left behind

Image 5970

Image 5971

When a locker's Cloud Group Name field is updated this configuration causes the creation of a new adapter/connector entity.  The old adapter/connector entity is retained.  After the 

The functionality is needed to allow solutions to have changes to entity key/join fields flow through to downstream systems.