ISC certifications API also can't count correctly

Feedback Bugs
, ,
1

Hi all, :slight_smile:

We call this API: GET /v2024/certifications?count=true&limit=250
It returns 230 objects and it in the headers that x-total-count is 253.
This is a mismatch, the count is not matching with the amount of objects that we get.

image
image1645×190 20.6 KB

image

I checked this API in different tenants (production and nonproduction) and also noticed (different) mismatches of counts and amount of objects.

I have been in contact with SailPoint Support multiple times on duplicate results or incorrect counters appearing either in API or UI, on differen object types:

CS0245728 - Duplicate Attributes in the Account Schema for SCIM 2.0 SaaS source
CS0236955 - Followup of CS0245728
CS0251455 - GET v3/sources count incorrect and duplicate results
CS0258279 - Followup of CS0251455
CS0249576 - Duplicate email templates
CS0254439 - Second followup of CS0245728
CS0254463 - Duplicate attributes in HR source.
CS0294469 - Wrong source counter
CS0197216 - Role appearing twice in list API
CS0300922 - Followup of CS0197216

The effect of this current bug seems to be a similar issue as a couple of the above, so I think SailPoint should not only solve the bug for /v2024/certifications, but also check all their APIs that support the count attribute and see if it truly matches the amount of objects it gives, both when giving a filter and when not giving a filter.

In addition, perhaps SailPoint could create an automated test that checks if the amount of objects and the count match regularly, especially during releasing new functionality. This should hopefully decrease the chance of this issue coming back.

Kind regards,
Angelo

2 Likes
2

I wonder what the root cause is. My first thought is that there are ghost objects/malformed objects, created over time, that are counted but filtered out when giving a listing.

I don’t remember the API, but I was able to create some objects that were not returned by the list operation anymore, they were counted up. I was able to delete them, but only because I still knew the ID.

We also have an open case where an AD entitlement is stored twice in the backend. When you list the entitlement, you find only one representation, and this one misses some attributes.

Until SP ISC implements some automatic data cleaning, I doubt that they will return the correct number of results. I think it is more probable to simply change the definition of X-Total-Count in the documentation.

3

Update from SailPoint Support,

A fix has been implemented by the engineering team. Support will test this fix before letting me know I can check it out afterwards.

1 Like
4

The fix is only for the certifications API, or for all API endpoints?

5

I think you already know the answer to that question :wink:
I will ask SailPoint Support to show proof that this is working on the other objects types as well, let’s see how they will respond.

1 Like