Customization Rule is not executing for AD application

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi,

I have created a Customization Rule for AD application and it is working fine in dev environment but when it moves to QA, the rule is not getting executed.

Few of the things I have tried to debug but it did not work:

  1. Tried to print logs
  2. Throw an exception
  3. Execute account aggregation with partition and without partition.
  4. Checked disabled optimization option on account aggregation task.
  5. Customization rule is not getting executed for existing AD application and rule is executed for newly created AD application which means there is something issue with existing AD application.

Note: We do not see any errors on logs

2

Hi Deepak,

Can you provide some screenshots, showing:

  • How the rule is configured in the UI
  • What the content of the rule is
  • How it is configured in the xml (both rule and application)

Regards,
Pieter.

3

Hi Pieter,

Please find the below screenshots

  1. How the rule is configured in the UI
    image
    image865×257 4.95 KB
  2. What the content of the rule is
    image
    image953×265 7.33 KB
  3. How it is configured in the xml (both rule and application)
    image

Just a placeholder rule, I want to see the log statement from customization rule, but its not getting printed.

4

To rule out that this is a logging issue, could you return null instead of object? If working, it should aggregate no objects anymore.

Regards,
Pieter.

5

yes, I did try by just return null but aggregation is successful and I can see all object are coming into SailPoint. This means customization rule is not even executed in aggregation

6

Correct. It could be some referencing issue. Have you tried deselecting it, saving the application, then selecting it back again?

7

yes, I did and also I have created a new customization rule from the UI and save it. But it did not get executed.

8

That is very weird. Can you tripple-check that you’re aggregating from the correct application? Maybe add your rule to another application and see the result from there?

9

yes this is unusual. I had config the same rule to newly created AD application and rule is getting executed but for existing AD application its not getting executed.

and also configured for existing azure ad application and rule is getting executed

10

Can you try doing a preview from the schema page? That should also execute the customization rule, ruling out the something is wrong with the aggregation task.

11

yes, i do preview from schema page still rule is not getting executed.

12

Sorry, I’m afraid I can’t help you based on these posts without actually looking in the environment…

13

I think customization rule will only trigger for the object when a change has occurred. So try updating some attribute in AD for that object and run your aggregation again.

14

Thanks for your inputs @pdeloos @sunny_tsang.

It is resolved by unselecting the customization rule under the schema rules and config only customization rule under aggregation rules.