certificationEntityCustomizationRule not running

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

8.4p2

Share all details about your problem, including any error messages you may have received.

We basically have setup 2 rules on our certfication the certificationEntityCustomizationRule and certificationItemCustomizationRule.

<entry key="certificationEmailTemplate" value="EmailTemplate-A"/>
<entry key="certificationEntityCompletionRule"/>
<entry key="certificationEntityCustomizationRule" value="Group Certification Entity Customization Rule"/>
<entry key="certificationEntityDelegationEnabled" value="true"/>
<entry key="certificationEntityRefreshRule"/>
<entry key="certificationItemCustomizationRule" value="Group Certification Item Customization Rule"/>
<entry key="certificationItemDelegationEnabled" value="false"/>
<entry key="certificationLimitReassignments">

The certificationItemCustomizationRule runs and works just as expected however I have not been able to make the certificationEntityCustomizationRule no matter what I try.

I have ensured that the rule name is correct.

I have tried clear cache and restarting the server multiple times.

Can these rules not be configured at once? What else can be the issue?

2

@hutge Have you tried to log something inside your rule to see is it actually running or not?

3

Yes I have added multiple loggers. And I don’t see any of them printed

4

Can you share your rules?

5

pleas check these points

a. type of rule

b. does it have any exceptions

c. do you have entity at time, may be you can print on top

d. some cert doesnot support entity customization so check in certification object if u have entity object.

let us know and also please share the rule and certification definition. that will helpful.

6

Could you please share the code? It will help in reviewing and identifying the issue more effectively.

7

@hutge Which type of certification you are trying to test? and please share your certificationEntityCustomizationRule for review.

8

a. Type of rule is CertificationEntityCustomization

b. No exceptions even a single log is not coming up so I am sure that the rule is never being called.

c. Yes I do have the entity I have used it in the certificationItem rule and it works as expected.

d. It’s the entitlement owner certification.

The rule:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule language="beanshell" name="Group Certification Entity Customization Rule" type="CertificationEntityCustomization">
  <Source>

  log.error("hr-entity 0");

  </Source>
</Rule>

I would like to add that I also have an exclusion rule configured and I see that the exclusion rule also runs per entity. Can this impact the customization rule?

9

It is the Entitlement owner certification.

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule language="beanshell" name="Group Certification Entity Customization Rule" type="CertificationEntityCustomization">
  <Source>

  log.error("hr-entity 0");

  </Source>
</Rule>

I would like to add that I also have an exclusion rule configured and I see that the exclusion rule also runs per entity. Can this impact the customization rule?

10

@hutge No impact if you have both exclusion and entity customization rules. Only thing to note is, the exclusion rule runs first and entity customization rule runs after that.

11

may be you already tried but can u try to remove the exclusion rule and then make a test ?

12

@hutge I have configured Exclusion Rule, CertificationEntityCustomization and CertificationItemCustomization in Entitlement Owner Certification and i can see logs are getting printed from all of them in the order: 1) Exclusion, 2) Item and 3) Entity.

In this scenario i can think something is wrong with your CertificationDefinition. Could you try reviewing and importing the attached certification definition and let us know the result.

Note: Found a fix?Help the community by marking the comment as solution. Feel free to react(:heart:,:+1:, etc.)with an emoji to show your appreciation or message me directly if your problem requires a deeper dive.

sampleCertDefinition.xml (9.8 KB)

13

I actually have the customization rules setup in the global configuration itself. I don’t see the entry for CertificationItemCustomization either yet it runs perfectly.

I tried adding the key directly to the certificationDefinition object and it worked.
Thanks for the idea!

14

@hutge Good to hear that it works. Whenever you get a chance, please mark your post as resolved to help fellow sailors having the similar issue.