PIRM task failing

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hello Experts,

We have noticed that PIRM task failing after doing Transfer events with below error.

LCM request scan failed on request 0000001086 with exception java.lang.NullPointerException: Cannot invoke “sailpoint.object.ProvisioningPlan$Operation.equals(Object)” because the return value of “sailpoint.object.ProvisioningPlan$AttributeRequest.getOperation()” is null

Can you please help me to fix this issue.

Thanks

2

Hi @niket345,

check the configuration of this request I think something is missing or is corrupted.

Verify this request has all own necessary attributes, especially the operations

3

Hi Niket,

Was the provisioning action launched using custom code or via certification revokes? It appears some mandatory attributes on the provisioning plan were not set when the request was raised.

4

@nasr_shah I have checked in the plan that we are removing roles as well as changing the OU location. Please refer the below plan

5

@enistri_devo I see that Verification Date is missing.
IdentityRequest completionStatus=“Pending” created=“1721815929011” endDate=“1721816134685” executionStatus=“Verifying” id=“ac1c95a790da1e9d8190e43a10b3761b” modified=“1721816134689” name=“0000000602” priority=“Normal” requesterDisplayName=“Scheduler” significantModified=“1721816134689” source=“LCM” state=“End” targetClass=“sailpoint.object.Identity” targetDisplayName=“DM-uRUElvkUOw, DM-lNzNmnLGVJ” targetId=“ac1c95a48e331cac818e40b88cf145ad”>

Is this something happened due to Code or some other configuration need to do.

image
image1704×409 12.6 KB

1 Like
6

Sorry I don’t see the plan, can you please share it again.

A couple of other questions please:

  • was any error message recorded on the request itself during provisioning?
  • in the identity request screen, do you see the account name or is it blank?

The verification date will be blank or missing until the request is fully verified (i.e. SailPoint has seen the changes on the target application).

7

DOCTYPE ProvisioningPlan PUBLIC “sailpoint.dtd” “sailpoint.dtd”
ProvisioningPlan
AccountRequest application=“IIQ” nativeIdentity=“133253” op=“Modify”
AttributeRequest name=“assignedRoles” op=“Remove” value=“3500”/
/AccountRequest
AccountRequest application=“Active Directory” nativeIdentity=“CN=C133253,OU=CHQ-QA,OU=Users-QA,OU=xxxxx,DC=caqa,DC=xxxxx,DC=com” op=“Modify”
AttributeRequest name=“AC_NewParent” op=“Set” value=“OU=CHQ-DEV,OU=Users-DEV,OU=xxxxx-DEV,DC=caqa,DC=xxxxx,DC=com”/
/AccountRequest
/ProvisioningPlan

8
  • was any error message recorded on the request itself during provisioning? – i can see this error while running the PIRM task.
  • in the identity request screen, do you see the account name or is it blank? i can see the account name
    image
    image1660×665 29.5 KB
9

The attached plan + request look good to me. From the error message I see the request with error is “0000001086”, while the screenshot is for a different request.

Am I correct to assume, the error is being thrown on multiple requests?

Can you try adding below attribute on the PIRM task. Run AD aggregation and PIRM task once:

<entry key=disablePreRefresh" value=“true”/>

Please note adding above attribute will skip targeted aggregation and refresh.

1 Like
11

okay but we have same plan and request for 0000001086.
entry key=disablePreRefresh" value=“true”

what will happened after adding above attribute and the error which we are getting any idea is it coming from which workflow as after plan set we are calling LCM Provisioning.

12

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.