Identity Broker Forum
Welcome to the community forum for Identity Broker.
Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.
Rebuild Aurion connector mapping table after report schema update
After an Aurion report is modified and Request Schema is run, the Schema attribute<->Mapping element table isn't updated. It's not possible to add mappings for any new fields, and old fields remain in the table, which is confusing.
When a Request Schema is run, non-existant report field mappings should be removed, and any currently missing ones should be added.
UNIFYBroker/Plus attempting to join source to incorrect target
Log says:
20221129,21:30:25,UNIFYBroker,Link,Error,"Request to sync changes on link failed. Request to sync changes on link Employee > AD User (ad53013b-b271-4ed6-a959-dc11aeaa5eca) in direction outgoing failed with message Source entity '0b5d5a72-fd60-4777-b1ef-f1d4a035c87d' cannot be joined to ambiguous join targets: [391e6395-a3c2-424c-9799-30a98508ac1f, 5a6e4486-75f8-4487-ab8f-4eeccf06a524]. Cannot proceed with join. [Count:4321]. Duration: 00:00:04.5645340
Link join criteria is:
Source entity is:
Target entities are:
Why would an attempt to join to 5a6e4486-75f8-4487-ab8f-4eeccf06a524 be happening, given it doesn't match the join criteria?
The root cause of this was staff from the customer's outsourced IT department updating employeeID values wrongly, in contravention of documented processes.
Please close this ticket and mark 'not a bug'.
Join calculation for source entity cannot be completed due to an invalid connection state. Reason: Source entity has multiple connections.
After the customer remediated duplicate employee IDs in AD, UNIFYBroker is still unable to correctly join and process links. The error message has changed to:
Synchronization job failed syncing 4322 changes on the 'Employee > AD User' link from the adapter to locker with the reason Join calculation for source entity 'e892faf3-5c17-4e9c-9be9-f9ee33cc68fe' cannot be completed due to an invalid connection state. Reason: Source entity has multiple connections.. Job ID: bf3c52ec-49a2-4655-8f00-360a6ffce78c Duration: 00:00:04.2503352
I'll attach the email thread with the customer that provides background to the next message.
Identifying previously denied entities in UNIFYBroker/Plus post-provisioning and synchronisation tasks
Entities that have been pushed onto $denySync in an link's pre-provisioning task may need to be excluded from certain operations in the synchronisation and post-provisioning tasks. For example, if an AD user has not been excluded from provisioning then an attempt to assign birthright AD groups will always fail, and should not be performed.
If would be helpful if there was some mechanism (e.g. a $denySync.ContainsEntity($Entity) method which returns $True if the entity has been .Push()ed previously) to allow detection of this situation.
The current workaround is to duplicate/copy the code from the pre-provisioning task which determines when to add the entity to $denySync into the post-provisioning and/or synchronisation task.
HPRM Trim associations connector failing to import
I am currently experiencing issues importing with a trim associations connector, I believe its the same as https://voice.unifysolutions.net/knowledge-bases/7/articles/3145-micro-focus-content-manager-associations-connector. The issue in particular is a timeout issue generating the below error. I don't recall a time when this connector was ever working as it has been misconfigured in the past. Please note other location connectors work fine and the agent connector successfully.
Some issue we had in the past, were this connector appeared to be mapped to the "location" connector and has since been update to the "associations".
Thinking something that was possibly incorrect with this config, I tried creating a new connector from scratch and the xml generated is the following, which appears to be the wrong connector type.
Apologies for the images instead of copy/paste, I cannot easily get the config out of the environment. Let me know if you need more information.
Currently running UNIFYBroker 5.3.3
HP TRIM connector 5.3.0.0
Error When Creating or Editing Multivalued Group Transformation on Adapter
I get the following error either when creating a new multivalued group transform or when editing one that already exists. It occurs after you hit save on the Pick Connector screen.
Entity Id search doesn't work
When I put an Entity Id into the search field on the Entity Search screen, UNIFYBroker doesn't search for the entity.
This is particularly problematical when searching by ID for one entity in a large partition, since the only way to find it is to order by Entity Id and browse result pages one by one, matching Entity Ids visually until the required entity is found. Even after selecting "Show 100 entries" for a customer with a large number of entities this takes many minutes and dozens of click-wait-for-page-load-look-and-scroll cycles. Sometimes this process needs to be repeated for many Entity Ids and it becomes frustrating and wastes time.
Entity Search filter OR option
When multiple filters are applied on an entity search the operator applied is by default an AND. A checkbox option(s) similar to say the MIM Portal entity search filtering options would be ideal, but at a minimum the ability to OR filters would be handy to assist test scenarios and troubleshooting.
Chris21 import unexpectedly hangs
A chris21 DET import has hung, seemingly forever. Is there some way to find out what caused it to hang? Could we have a timeout added so it automatically recovers. Right now there's no way to find out there's an issue until the customer rings to ask why processing has stopped.
AD outbound link ends up with join errors to non-existent adapter entities during normal operation
Following successful initial data load and a number of normal HRIS/AD connector import cycles an outbound link to AD has somehow ended up with a join to a non-existent adapter entity (in the case above, eeb1ac7e-fda0-4f64-a509-2af2a88ac22f).
Could this be 4306 Non-existant adapter joins when outgoing baseline syncs fail back to haunt me again? :(
Customer support service by UserEcho