Purpose of NativeIdentityChangeEvent Object

[kevinwoodbury]

Which IIQ version are you inquiring about?

8.3P3

I recently came across an object type in debug called NativeIdentityChagneEvent. It looks like this object is tracking (based upon AD UUID) changes to the DN of Account / Group. I can’t seem to find any clear documentation on what this object is used for.

1. I’m guessing these objects are created during aggregation of the Active Directory Connector? Currently our AD connector does not have Native Change Detection turned on, I’m curious as to how these are being generated.

2. I see a large volume of these objects are “stuck” in a state of “Waiting”. What process moves these from a status of “Waiting” to a status of “Processed”, additionally what actually happens in IIQ when these change from a status of “Waiting” to a status of “Processed”?

Thanks All!

[vinnysail (vinod kumar maram)]

Hi @kevinwoodbury,

Please refer these threads, may be it would help.

Native Identity Change Id Event Issues

When I look at the Provisioning Transactions, there are many failure transactions. When reviewing the failed transactions, I find the identities have multiple native identity Change Id Events. I have to manually remove them by using a custom task. However, I am having a problem identifying why this is happening. I am currently using SailPoint 8.3p2 with the Tomcat version of 9.0.78. Any direction on this would be helpful .

Question regarding pruning of NativeChange Events

Which IIQ version are you inquiring about? Version 8.3 Share all details related to your problem, including any error messages you may have received. Hello, We just recently upgraded from IIQ 8.0p1 to 8.3p3, which went pretty well overall. When we did the upgrade we noticed the new NativeChange Events that where triggering, and added the “nativeIdentityChangeMaxAge” value to the system config and set it to “7” so these events wouldn’t accumulate. We are seeing a number records in the Request o…

documentation -
https://documentation.sailpoint.com/identityiq/help/appconfig/native_change_detection_.html

[iamksatish (Satish Kurasala)]

@kevinwoodbury
Native change detection is different from Native Identity change event, I have clearly explained this in below thread

Native Identity Change Id Event Issues - IdentityIQ (IIQ) / IIQ Discussion and Questions - SailPoint Developer Community

1. I’m guessing these objects are created during aggregation of the Active Directory Connector? Currently our AD connector does not have Native Change Detection turned on, I’m curious as to how these are being generated.

Answer - these are generated because of feature checked Under Global settings Native Identity Change Event detection , check under Miscellaneous.

. I see a large volume of these objects are “stuck” in a state of “Waiting”. What process moves these from a status of “Waiting” to a status of “Processed”, additionally what actually happens in IIQ when these change from a status of “Waiting” to a status of “Processed”?

Active Directory ObjectGUID, move/rename support FAQ - Compass

Check the above thread, you will have detailed explanation, in short SailPoint changed the key for aggregation starting 8.3 causing this events if there is change in native identity on an account

Note - Please dont get confused with Native change detection with Native Identity change event, these two are completely independent