Access Request with Account Selection and Future Role Sunrise date

Hi All,

When we are requesting a role from the Manager User Access quick link we are getting the below error.

2021-02-03T11:45:40,091 ERROR https-openssl-nio-443-exec-2 rest.ui.jaxrs.GeneralExceptionMapper:29 - Uncaught JAX-RS exception.
sailpoint.tools.GeneralException: Invalid account selection CN=John Doe,OU=People,DC=ACME,DC=com

Repro Steps:

1.Goto Manage User Access → Choose an Identity that has multiple accounts in AD.
2. Request a role that has AD entitlements
3. Account Selection popup appears and select any one account.
4. While submitting set role assignment Sunrise date to future.
5. Click on Submit

If anybody is facing the same issue please let me know, and if you have any workaround kindly let me know.

Hi Naresh,

Can you confirm via the Identity XML for John Doe, that they have an account Link for your Active Directory application, and that the account link “nativeIdentity” attribute matches:

CN=John Doe,OU=People,DC=ACME,DC=com