We have been testing a certification in our DEV environment, and we are doing final testing with limited user-sets in our PROD environment. However, we cannot get reminder email notifications to send out. We compared our certification settings AND the compliance manager settings between environments, and we cannot spot the difference.
Disclaimer
In DEV, we are running IIQ 8.4 sp2. I have looked through the patch notes on the 8.4, 8.4sp1, and 8.4sp2 releases, and there are no mentions of certification reminders included as a bug We had built these certifications in 8.3 sp2 and had no issues post upgrade. The notifications get sent out at midnight on DEV. I am not sure what triggers these to be sent at that particular time.
Possible Avenues
Is there a task that needs to be running to send off these notifications? Are there other global certification settings that need to be ticked?
I’ve just been at a loss of what is different between our two certifications from one environment to the other that is blocking the reminder notifications.
Notification Setup
Here is our notification setup. We have different reminders that use standard OOTB templates and attempt to add in our custom templates and recipient rule to figure out where the breakdown is. However, we got none of these notifications:
Please check if your system tasks are running successfully. There are five standard tasks; for example, ‘Perform Maintenance’ is the most important. Each system task is responsible for a separate function. Some tasks are scheduled daily.
The ‘Perform Maintenance’ task runs more frequently, typically every 5 minutes in my test environment, but its frequency depends on the other aggregation tasks in your environment.
This was one of the important questions asked during my IdentityIQ Engineer exam. I still remember it took almost 5-10 minutes to sort out the sequential tasks in correct order."
Perform Maintenance–prunes identity snapshots, task results, and certifications, escalates orphaned work items, and performs other background maintenance tasks.
Perform Identity Request Maintenance– prunes old identity request objects and scans unverified access requests to check for provisioning completeness.
CheckSunsetRequests–send notifications when a Role with a sunset date is approaching expiration.
CheckExpiredMitigations– scans all users for temporary exceptions allowed in a certification that have now expired. The original certifier can optionally be notified when allowed exceptions expired.
CheckExpiredWorkItems–scans all work items looking for those that need to be canceled or escalated to a different user
