Provisioning Failure: Before Provisioning Rule could not be found

Which IIQ version are you inquiring about?

Version 8.3p4

Please share any images or screenshots, if relevant.

Share all details about your problem, including any error messages you may have received.

Hello,

I am encountering a Provisioning Failure stating that the rule defined for Before Provisioning could not be found.

However, when I check the Rules tab of the application, the Before Provisioning Rule appears to be properly configured, and I am able to edit it without issue.

This is an Active Directory Application that has a Proxy Application of type Cloud Gateway.

Do you have any insights on what might be causing this Provisioning Failure?

We did not encounter this issue. The application XML refers to the “beforeProvisioningRule” by name, not by ID. It’s possible there may be a typo in the rule name. You can manually rename or correct the rule from the debug page inside the Application object.

If that’s not the issue, you can try the following steps:

We previously faced a similar issue with the identityAttribute rule, which was due to a cache memory problem. Restarting Tomcat resolved it.

You can also try these approaches:

  • Delete the rule and recreate it.
  • Re-add the rule in the Before Provisioning section.
  • If caching is causing the problem, consider restarting the relevant service.

We have another AD Application that uses the exact same rule and it doesn’t throw any Provisioning Failures.

Could this error be masking some kind of Access Denied or connection failure?

Just for kicks, try de selecting it in the connector and save. Then go back and add it and save.

1 Like

Sorry for taking so long to reply.

Even after de selecting and selecting the rule again, it is still returning the provisioning failure for a set of accounts.

The “AD BeforeProvisioning” Rule was not selected in the IdentityIQ Cloud Gateway Synchronization Task.