Hello community,
I am encountering an issue when creating a certification campaign in Identity Security Cloud and would appreciate some guidance.
Here is the workflow I am following:
-
Search Query: I am using the query
@apps(name:"Ap-COE")to define the scope. -
Access Profiles: The system correctly returns 6 Access Profiles to be certified.
-
Refine Identities: In the next step (“Refine Identities”), the preview shows approximately 1,414 identities that match the selected Access Profiles.
-
Campaign Generation: I proceed to select all 1,414 identities to be included in the campaign.
The Issue: Once the campaign is generated/activated, something unexpected happens. Despite the preview showing 1,414 identities, the active campaign only includes ~60 identities distributed across 52 reviewers.
We need to understand why there is a discrepancy of over 1,300 missing identities. Why are the vast majority of the identities shown in the “Refine” step excluded from the final certification?
Has anyone experienced this behavior or knows what settings might be filtering these users out upon activation?
Thanks in advance!


