Huge discrepancy in Identity count: 1414 Identities in Preview vs. 60 in Active Campaign

Hello community,

I am encountering an issue when creating a certification campaign in Identity Security Cloud and would appreciate some guidance.

Here is the workflow I am following:

  1. Search Query: I am using the query @apps(name:"Ap-COE") to define the scope.

  2. Access Profiles: The system correctly returns 6 Access Profiles to be certified.

  3. Refine Identities: In the next step (“Refine Identities”), the preview shows approximately 1,414 identities that match the selected Access Profiles.

  4. Campaign Generation: I proceed to select all 1,414 identities to be included in the campaign.

The Issue: Once the campaign is generated/activated, something unexpected happens. Despite the preview showing 1,414 identities, the active campaign only includes ~60 identities distributed across 52 reviewers.

We need to understand why there is a discrepancy of over 1,300 missing identities. Why are the vast majority of the identities shown in the “Refine” step excluded from the final certification?

Has anyone experienced this behavior or knows what settings might be filtering these users out upon activation?

Thanks in advance!

Hi Juan,

Are those Access Profiles granted through a role or lifecycle state for the users that do not appear in the campaign? If so, they will not appear individually in certifications

Thanks,

Margo