Entitlements are not appearing when certification campaign is getting generated

Hi Experts,

I have created a JDBC source in Sailpoint IDN and I want to certify identities present in my source. There are around 42 accounts and more than 300 entitlements. But when I go ahead and generate a campaign, only around 100 entitlements are being identified whereas there are more than 300.

After the campaign is generated, only 4 entitlements are generated for 9 of the identities. I have tried creating different campaign it’s the same every time. Any thoughts on what could be the issue here?

Hello @SagarK

Welcome to the community :party_popper:

Are these entitlements part of access profiles or roles ?

@SagarK
Did you mark them as requestable?

No they are not bundled into any access profile or role

No I haven’t marked them as requestable. Could that be the reason why they aren’t appearing on the campaign?

@SagarK , could you please provide the total number of correlated accounts? I understand that only identities are included in certifications. Based on my information, there should be 9 correlated accounts with 4 associated entitlements.

Regarding the 100 entitlements you mentioned, could you elaborate? Are you generating a campaign using a search? If so, are you limited to viewing only 100 entitlements per page, or is that the total number of entitlements displayed?

@SagarK
It could be the source selected or sticky entitlements. I always stack my entitlement in a access profiles to avoid sticky issues.

Are the accounts correlated? And do they have all 300 entitlements actually assigned to the accounts? The campaign will only generate for correlated accounts, and only for entitlements that users actually have.

@sidharth_tarlapally Total number of correlated accounts are : 9
Associated entitlements : 4

Yes I am generating a campaign using search. There are 2 pages with each having 50 entitlements so that’s 100 if both are combined.

Yeah I could check that. Thanks Tom!

1 Like

@SagarK - we handle our entitlements and access reviews similarly to your method. I’ve noticed a similar issue with a missing entitlement and have submitted a support ticket.

@SagarK
In this case this is the expected behaviour isn’t it ?
The campaign will show the entitlements that are only associated with the Identity.
And the entitlement count on the source has nothing to do with the entitlement count in this campaign unless your campaign is applicable to this particular source.
what is the search query that are using in the campaign ? Are we filtering the campaign to this source ? If yes , you should be able to see 4 entitlements only . If no , you can see all the entitlements on the tenant which are associated with Identities

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.