I have a JDBC source for which I have written the provisioning rules for create and modify. The create works fine but every time I modify the identity with a different entitlement, I see a bunch of identity refresh activities triggering to set the value of the entitlement back to the previous state.…

This type of cyclical entitlement switching may be caused by one or more configurable objects that affect aggregation and provisioning. For example, a transform could be modifying the incoming aggregated attributes in such a way as to trigger a provisioning event automatically based on some role cri…

[image] Colin McKibben: only way to find the cause is to do a deep dive investigation of the entire aggregation and provisioning process for the affected identity. You will need to carefully analyze each transform, role criteria, provisioning rule, and attribute sync profile and manually map out…

I’m not aware of a good way to figure out what exactly is causing the refresh. All I know is that our docs indicate three different ways an identity refresh might occur. Processing Identity Data - SailPoint Identity Services SailPoint Identity Services Documentation …

Hi Vikram, Is the user requesting the entitlement from the UI ? If yes this may be issue of sticky entitlement. You might need to first remove the old entitlement and then add the new entitmeent using assignment as true in the Before Provisioning Rule

[image] Rakesh Bhati: Is the user requesting the entitlement from the UI ? If yes this may be issue of sticky entitlement. You might need to first remove the old entitlement and then add the new entitmeent using assignment as true in the Before Provisioning Rule Hi Rakesh, what do we mean by…

How is the entitlement request for the user ?

Identity Refresh sets the entitlement to old value

Identity Security Cloud (ISC) ISC Discussion and Questions

vikramsah (Vikram Sah) February 28, 2024, 4:29pm 8

the entitlement request is done by api. access type is Grant_access.

Topic		Replies	Views
Unrecognized Entitlement & Continuous Provisioning during Identity Refresh Run ISC Discussion and Questions identity-security-cloud , provisioning , entitlements	6	219	April 6, 2024
Webservices Add Entitlement by Requesting keeps on reprovisioning and created Identity refresh activities ISC Discussion and Questions webservice-connector , identity-security-cloud , provisioning , entitlements	5	223	November 12, 2024
Identity Refresh and event-based processing ISC Discussion and Questions rules , aggregation , identity-security-cloud , provisioning	9	723	November 11, 2024
Identity Now automatic provisioning after deletion due to identity refresh ISC Discussion and Questions aggregation , identity-security-cloud , provisioning	2	256	April 8, 2024
Modifying a Single valued entitlement ISC Discussion and Questions identity-security-cloud , provisioning , jdbc-connector	9	522	April 30, 2024

Identity Refresh sets the entitlement to old value

Related topics