Identity Broker Forum
Welcome to the community forum for Identity Broker.
Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

Entity Search filter OR option
When multiple filters are applied on an entity search the operator applied is by default an AND. A checkbox option(s) similar to say the MIM Portal entity search filtering options would be ideal, but at a minimum the ability to OR filters would be handy to assist test scenarios and troubleshooting.

Chris21 import unexpectedly hangs
A chris21 DET import has hung, seemingly forever. Is there some way to find out what caused it to hang? Could we have a timeout added so it automatically recovers. Right now there's no way to find out there's an issue until the customer rings to ask why processing has stopped.

This has been implemented and is available in the release of UNIFYConnect Module for Chris21, which will be made available shortly.

AD outbound link ends up with join errors to non-existent adapter entities during normal operation
Following successful initial data load and a number of normal HRIS/AD connector import cycles an outbound link to AD has somehow ended up with a join to a non-existent adapter entity (in the case above, eeb1ac7e-fda0-4f64-a509-2af2a88ac22f).
Could this be 4306 Non-existant adapter joins when outgoing baseline syncs fail back to haunt me again? :(

Chris21 API delays and timeouts
Connecting from UNIFYConnect to my customer's Chris21 via PortBridge I am seeing some strange API delays.
For DET I see the following - connection successful, then a one minute delay before all the records come through:
For POS it's a bit more problematical - connection successful, but nearly 5 minute delay before the records come through, accompanied by a "loop time limit" timeout error which aborts the import:
Do you have any suggestions what might be going on to result in this behaviour?
The customer is filtering the results we see to just a small number of records, as this is a small-scale POC.

Seems like this problem is occuring because the customer has defined server-side filtering of the records returned to us, and sometimes the backend runs for over 280 seconds without passing a result back to the Chris21 web service, at which point it times out. Sadly, we haven't been able to find where that 280 seconds delay is configured yet. But the issue is definitely on the Chris21 end.
It should be OK to set this ticket non-private, I was careful to redact customer details and credentials.

Join transformation resulting in high resource consumption
Priority: Critical
Impact: Use of transformation renders whole UNIFYConnect environment unusable
A join transformation on a single valued field is causing high CPU, Memory and Database resource consumption.
Source adapter has 7000 entities. Connector being joined to has 7100 entities.
May be of interest: The field being joined to in the connector has some values as "empty" rather than null.

This has been implemented and is available in the release of UNIFYConnect V6, which will be made available shortly.

Duplicate changes registered for the same entity in the adapter
Priority: Low/Medium
Impact: Higher than necessary UNIFYConnect resource consumption
With a connector and adapter configured in UNIFYBroker, and the adapter has multiple transformations registered (such as joins and future dated changes), a change appears to be registered in the change table for each combination of entity + transformation.
This can result in 8-10 changes being registered for the same entity. While this isn't impactful from a change perspective (the latter computations of changes result in no actual changes being made to the adapter entity), a connector import of 7000 entities is resulting in upwards of 60,000 changes being registered which results in unnecessary delays of processing and computation on the database.

Sometimes Changes Sync doesn't run when there are pending changes
In UNIFYConnect very occasionally Change Sync won't run (either from a schedule or when invoked manually from the UI) when there are pending changes on the link. Service restart doesn't help, but running a Baseline Sync does. I have no idea what causes it to get into this state I'm afraid.

Changes register item processing on connector failed with reason Cannot process a DateTime of type 'Unspecified'
The error Changes register item processing on connector TechOne Person failed with reason Cannot process a DateTime of type 'Unspecified' is logged for an adapter which has a join to another connector with a Timestamp field that was populated by PowerShell when that adapter's base connector imports a new or updated entity, even when that Timestamp field has DateTime kind 'Utc' or 'Local'.
My config has two PowerShell connectors, TechOne Person and TechOne Position. The Position connector has two fields StartTimestampUTC and EndTimestampUTC which are set to valid DateTime values, of kind 'Utc'. There is one adapter, TechOne Person, for which the Person connector is a base, and the Position connector is a Join transform with StartTimestampUTC and EndTimestampUTC fields both mapped into adapter fields.
When a new record is present in the Person connector import, reflection causes the above error message to be logged, but the adapter record is created correctly nevertheless. When a subsequent Generate Changes is run on the adapter, the error is not logged. If the record is reimported with updated values, the error is logged.

Chris21 agent rejecting server certificate even when set to None: "remote certificate is invalid according to the validation procedure"
My customer is seeing this error, even though Handle Certificate Errors is set to "None":
Here's the config:
Port 80 without SSL works fine, with an otherwise identical configuration.
In case it's relevant, the connection to Chris21 is via a UNIFYConnect PortBridge tunnel on a non-standard IIS port number (444). It's not possible to use port 443 due to restrictions on the customer side.

This has been implemented and is available in the release of UNIFYConnect V6, which will be made available shortly.

How do I identify the Chris21 endpoint URI?
I am trying to connect to a new customer's Chris21 instance (via PortBridge, just to make it more complicated) and they don't appear to have a "Scalable/c21connect.asp" endpoint in their Chris21 install. How do I work out what URI to use instead?

I was able to find the endpoint by going to the Chris21 web server's IIS, Exploring the web site and finding the path to the file called c21connect.asp.
Customer support service by UserEcho