Hi,
I am struggling with this situation wherein I have a JDBC connector with the provisioning rule updated in it. It worked fine in the beginning but now I see that every time I delete the entry from the DB and aggregate an identity now identity refresh automatically recreates the deleted row with the same entitlements.
I checked that this is not caused by an Idn role.
There may be an Access Request that was approved for the identity in question that will recreate the account until a Certification is created to remove/deny the access.
Think of IDN as an Actual State vs. Desired State type of machine. If there’s an Access Request Approved for the access then it will detect this missing access and try to restore it. The way to prevent this is a Certification that supersedes the Access Request revoking the access.
This is to correct issues that IDN assumes were “out of band” (i.e. native changes) to keep it in control.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.