Non-Employee Risk Management - System User Roles are removed on Initial user login

Here’s what I did:

  1. If your “Use Identity Security Cloud Entitlements for Roles” toggle is already On, at the time of adding the NERM Users source. Then you need to toggle that off, then re-toggle that on.
  2. You need to specify the PROVISIONING feature flag on the source. (fine prints) By default, it’s just an empty array…and that’s not what you want. ## Most people missed this step.

image

image

  1. Then, depending on how responsive ISC feels like being at that time of the day…you’ll get this after some minutes:

If you don’t have the PROVISIONING feature flag on the source, you would get this (the manual provisioning flow).

Essentially, the behaviour mentioned in the OP is the outcome of the toggle. It behaves as a “If ISC didn’t provisioning the role to this user, zap it”-toggle. That’s why you have this warning: