Identity History configuration

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , ,
1

Hi all,

How can we configure Identity history that we see in the history tab of an identity. It does not seem to be present in the UI

Thanks in advance

2

@rishavghoshacc You can Maintain identity histories option in refresh identity task, update identity history by creating the identity snapshot. This may cause performance issue, however there are couple of cases like we need to create identity snapshot based on the life cycle events like in case of termination or transfer. Here is sample code which can be used to create identity snapshot programmatically.

String identityName = "<name of the identity in IdentityIQ>";
Identity identity = context.getObjectByName(Identity.class, identityName);        
IdentityArchiver identityArchiver = new IdentityArchiver(context);        
IdentitySnapshot identitySnapshot = identityArchiver.createSnapshot(identity);        
context.saveObject(identitySnapshot);
context.commitTransaction();
3

In Refresh Idenitty Cube Task, below option can be selected:

image
image1557Ă—505 25.3 KB

Once you run the task. in the identity history, Snapshot entry will be present.

image
image1449Ă—739 31.8 KB

But this option is not recommended as it can cause performance issues if you have a lot of users in the environment and you are running it for all the users.

Add filter and Configure it for few users that you want using this refresh task.

1 Like
4

In global setting update “Identity Snapshots” setting.

image
image493Ă—139 5.74 KB

Also Update “Identity Attribute Changes”

image
image535Ă—526 15.9 KB

Enable “Maintain identity histories” check box in Refresh identity job

5

You can use Identity Refresh task with the Maintain Identity History option selected.

1 Like
6

@msingh900 Is there a configuration to set how many such histories we can store for an identity?

7

@rishavghoshacc There is no limit to the configuration. You can take as many snapshots as you want, but as a good practice, take a snapshot whenever there is some changes you are doing to any identity.

8

@rishavghoshacc i @

I had a bad experience enabling the “Maintain Identity Histories” checkbox on multiple identity refresh tasks as part of false-positive mover events troubleshooting.

This caused the database disk space to reach capacity, leading to out-of-sync DB nodes and a massive buildup of pending logs. Please be cautious: only enable this feature when absolutely necessary and ensure its use is optimized.

9

Dear @rishavghoshacc

Greetings!

Most of the questions in this thread have already been answered by @msingh900 and @Sumit_Ukarande

Regarding your latest question—“is there a configuration to set how many such history we can store for an identity?”—here are the key settings:

There is an option for “Days before snapshot deletion.” If this is set to 0, the system will keep all history indefinitely (as Manish mentioned), but this has significant performance implications for your database. If set to 7, it will retain identity snapshots for one week, after which they will be automatically deleted by the relevant system performance maintenance tasks.

Note: This explanation and my testing are based on IdentityIQ 8.4/8.5, though these settings generally remain consistent across previous versions.

Setting #1: Refresh Identity Cube Task

  • Path: Setup > Tasks > Refresh Identity Cube (or) Refresh Identity Cube Concurrent
  • Action: Ensure the “Maintain identity histories” checkbox is selected.

image
image889Ă—107 8.94 KB

Setting #2: Snapshot Frequency

  • Path: Gear Icon > Global Settings > IdentityIQ Configuration > Identities
  • This controls how often a snapshot is captured (e.g., daily vs. every change).

image
image454Ă—113 10.2 KB

Setting #3: Retention Period

  • Path: Gear Icon > Global Settings > IdentityIQ Configuration > Miscellaneous
  • Define the “Days before snapshot deletion” here.

image
image637Ă—361 57.1 KB

Setting #4: Perform Maintenance Task To enforce these retention rules, the Perform Maintenance task must be scheduled to run. Specifically, the “Prune identity snapshots” option must be selected within the task settings to ensure old data is actually removed in conjunction with Setting #3.

image
image797Ă—613 63.1 KB

Let me know if you have any further questions. If the recommended settings work for you, please mark one of the comments as the Solution.

1 Like
10

Hi @rishavghoshacc

Regarding the Identity history configuration: are the entries now appearing for you in the history tab?

I hope you have complete understanding of the following 4 key settings.

  1. Refresh Identity Cube Task – Maintain identity histories
  2. Snapshot Frequency – Snapshot frequency in days(2 equals every second day)
  3. Retention Period – Days before snapshot deletion
  4. Perform Maintenance Task – Prune identity snapshots

Note:
:white_check_mark: Mark the Solution:
– Help the community by marking the correct comment as the Solution.
:raising_hands: Show appreciation:
– Feel free to react with an emoji (:+1:, :heart:, etc.) to let others know the post was helpful.
:envelope: Need more help? Message me directly if your issue requires a deeper dive.