I have created a dummy entitlement (webservice connector) and included it in an access profile, making it available in the Request Center. When a user requests access, the account is successfully created on the application side along with the required entitlements.
However, since the dummy entitlement does not exist in the application, after aggregation, the access profile is no longer visible for that user under the Access tab.
My question is: will ISC attempt to add the missing dummy entitlement after some time or during a refresh cycle? I understand that if access is missing, roles may attempt to re-provision it. Does the same behavior apply to access profiles as well?
@Manju22 The answer is No, not automatically for Access Profiles
ISC does not automatically re-provision missing access profile entitlements during refresh cycles the same way it does for Roles (birthright/assignment).
As suggested by @Santhakumar it will not try to re-provision it. Also to see that access profile in identity cube, have you map that dummy entitlement attribute in response mapping of single account aggregation operation ? Please map it to single account aggregation and check the result.
Thank you.
The dummy entitlement doesn’t exist in the application, so when aggregation runs it doesn’t find it on the account — ISC treats it as removed and strips it off. ISC will not re-provision it automatically for access profiles the same way roles do. This link might be helpful: Group, Entitlement and Access Profile is removed after account aggregation