How to find a way to remove orphaned entitlements from identities that are associated with application "Active Directory"

IdentityIQ (IIQ) IIQ Discussion and Questions
21

Did you do a refresh with refreshIdentityEntitlements=true?

22

Are the groups orphaned or deleted? I believe you need to delete the groups to make the memberships go away.

23

Hi Paul,

Yes, we have enabled.

24

Hi Paul,

We have deleted those groups and are not appearing in “Entitlement Catalog”.

25

Hi Manish,

I have written Customization Rule and its removing entitlements from “Application Accounts” tab but not in “Entitlements” Tab of a user.
So, i have removed “IdentityEntitlements” via run rule and ran AD Account Aggregation Task. Then everything was perfect.
Please provide your suggestions on this.

26

@sivanagi_reddy

First clear your orphaned entitlements from the Entitlement page using Custom Rule Runner Task. Once it is removed. Then, add your logic of customization rule in app.

Once the above steps are done, perform aggregation.

27

HI Manish,

Sure, I will do that. Thank you very much for your support in resolving this issue.

28

@sivanagi_reddy

If it resolves the problem. mark this problem as solved.

Thanks