Identitizer:4100 - Ignoring older style global rule for attribute: orgStatus

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Hello Team,
Can anyone help me what this issue I am seeing? And how can I fix this?
2024-05-28 13:55:12,766 WARN Identitizer:4100 - Ignoring older style global rule for attribute: orgStatus
Thank you

2

Can you please show your attribute definition for orgStatus attribute (in identity object config)?

3

Hello @kjakubiak
Here is it:

<ObjectAttribute displayName="Org Status" editMode="ReadOnly" name="orgStatus" namedColumn="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" id="" name=" Identity Attribute Copy Rule"/>
    </RuleRef>
    <AttributeSource name="AppRule:  Identity Attribute Copy Rule Oracle-HR">
      <ApplicationRef>
        <Reference class="sailpoint.object.Application" id="e" name="Oracle-HR"/>
      </ApplicationRef>
      <RuleRef>
        <Reference class="sailpoint.object.Rule" id="" name=" Identity Attribute Copy Rule"/>
      </RuleRef>
    </AttributeSource>
"
4 
 <ObjectAttribute displayName="att_display_name" editMode="ReadOnly" name="displayName" standard="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" id="" name="IdentityMapping-DisplayName"/>
    </RuleRef>
    <AttributeSource name="GlobalRule:IdentityMapping-DisplayName">
      <RuleRef>
        <Reference class="sailpoint.object.Rule" id="" name="IdentityMapping-DisplayName"/>
      </RuleRef>
    </AttributeSource>
  </ObjectAttribute>

That’s the reason - you don’t have AttributeSource for GlobalRule which is new way of using Global Rules

This part os old way of defining GlobalRules (and in your case this is the only one)

<RuleRef>
      <Reference class="sailpoint.object.Rule" id="" name="IdentityMapping-DisplayName"/>
    </RuleRef>

This is the new one

 <AttributeSource name="GlobalRule:IdentityMapping-DisplayName">
      <RuleRef>
        <Reference class="sailpoint.object.Rule" id="" name="IdentityMapping-DisplayName"/>
      </RuleRef>
    </AttributeSource>

There is a check in identitizer which is checking if both of them exist - if there’s no attribute source and only RuleRef on the ObjectAttribute it’s throwing WARN message.

1 Like
5

Check this article

Error: Ignoring older style global rule for attribute - Compass (sailpoint.com)

This will resolve your issue

6

@kjakubiak I am seeing this issue with most of the attributes. So, I need to add AttributeSource in all of them

7

If you use GlobalRules then yes

8

Hello @kjakubiak and @iamksatish

I just found we use Application Rule for Identity Mappings not a Global Rule.

9

Then remove line 2,3 and 4 from your snippet it should solve issue

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.