Dispatch Access History task failed

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi team,

We are getting the below error while we are running the dispatch access history task. Can you please suggest on this.

image
image1476×384 73.6 KB

2

Hi Suresh, can you check in your SystemConfiguration to see if encryptedClassFieldConfig exists and is defined

3

@sureshbomm Please help us with details.

  • Have you upgraded your instance recently?
  • Was this task ever run succesfully and this error is coming recently?
  • Have you made any changes to SystemConfiguration? and validated it after the upgrade.

Normally SysConfig holds the encryptedClassFieldConfig (same key mentioned by @ronald_davis ) and other services may invoke internal APIs to read entries from there. For Data Extract, these keys should be available inside encryptedClassFieldConfig : extractable & decryptable.

4

  • Have you upgraded your instance recently? -Yes

  • Was this task ever run succesfully and this error is coming recently? - No

  • Have you made any changes to SystemConfiguration? and validated it after the upgrade. - No

5

@sureshbomm In that case, please review your System Configuration if the desired keys are available or not. Please follow the product documentation for Data Extract task and Access History to make sure you are making the right changes.

6

We have verified the key is not present in system configuration

7

Got it! Please add that key and the associated values to your SystemConfiguration and run the dispatch access history task again. You can find the key and its values inside WEB-INF/config/init.xml. Here is an example of what it looks like in IIQ 8.5. I would probably also to check to make sure no other attributes/configurations were missed during the upgrade

<!-- Encrypted CLass Field Mapping for Data Extract \*Note: Subtypes are lowercase -->
<entry key="encryptedClassFieldConfig">
  <value>
    <Map>
      <entry key="sailpoint.object.Identity">
        <value>
          <Map>
            <entry key="AXmlAttributes">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="password">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="xmlAuthenticationAnswers">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="passwordHistory">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
          </Map>
        </value>
      </entry>
      <entry key="workgroup">
        <value>
          <Map>
            <entry key="password">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="xmlAuthenticationAnswers">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="passwordHistory">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="AXmlAttributes">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
          </Map>
        </value>
      </entry>
      <entry key="sailpoint.object.Link">
        <value>
          <Map>
            <entry key="passwordHistory">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
          </Map>
        </value>
      </entry>
      <entry key="sailpoint.object.Application">
        <value>
          <Map>
            <entry key="secretFields">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
            <entry key="encryptedFields">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
          </Map>
        </value>
      </entry>
      <entry key="sailpoint.object.TargetSource">
        <value>
          <Map>
            <entry key="configuration">
              <value>
                <Map>
                  <entry key="extractable" value="false"/>
                  <entry key="decryptable" value="false"/>
                </Map>
              </value>
            </entry>
          </Map>
        </value>
      </entry>
    </Map>
  </value>
</entry>
8

We are getting below warning after task execution completed

image
image1425×334 91.8 KB

9

Hi Suresh,

Could you please run the task again and provide logs related to the task. Thanks!