Error while disabling account

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello,

We are encountering the following error when attempting to disable account. Does anyone have insights into the meaning of this error and possible resolutions?

[“java.lang.RuntimeException: sailpoint.tools.GeneralException: A different object with the same identifier value was already associated with the session : [sailpoint.object.EntitlementGroup#3b9e72c4d6014f80a2cf3e4bdcb769a7]”]

Thanks,
Sushant

2

Hi Sushant,
Thank you for the post. Could you please elaborate on the Source which you are trying to disable ? Are you doing the same during a Leaver process ? or trying to disable using the UI option?

Thanks
Rakesh

3

Hey @RAKGDS,
We are disabling Active Directory account as part of the leaver process. We have set up the AD account disablement in the provisioning tab of the Lifecycle state.
The account disablement from the UI option works fine.

Thanks,
Sushant

4

Are you also removing any groups as part of the leaver?

Thanks
Rakesh Bhati

5

Yes, in the leaver process, the user’s LCS undergoes changes that no longer align with the role membership criteria. Consequently, the user is removed from the role, leading to their removal from the associated AD group.

Thanks,
Sushant

6

Is it a birthright role which is getting removed ?

Thanks
Rakesh Bhati

7

Yes, correct.

Thanks,
Sushant

8

Is it coming for all the users or a single user ? Could you please test for couple of users ?

9

It’s not happening for all users. I saw this happening for 5-6 users only.

Thanks,
Sushant

10

I would recommend to do single aggregation of these users and then try to do a disable of the AD account.

Thanks
Rakesh

11

We are also experiencing the exact same issue. Disabling AD account. Same message. Some but not all accounts/disable events failing.

Was this resolved on the tenant which reported it here ?

12

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.