Revoked cert entitlements disappear from the UI and from the table

Which IIQ version are you inquiring about?

8.2p3

Share all details about your problem, including any error messages you may have received.

Revoked cert entitlements are getting disappeared from the UI. When I looked into SPT_CERTIFICATION_ITEM and SPT_CERTIFICATION_ACTION tables, I couldn’t find them there either. I checked the SPT_IDENTITY_ENTITLEMENT table, there is a CERTIFICATION_ITEM column in the there, which links this table to the SPT_CERTIFICATION_ITEM table but CERTIFICATION_ITEM was null. Approved entitlements are present in the UI and in the tables, only revoked ones are missing. Any clue what is going on? Any advice on how to troubleshoot this?

Hello @waqarali1 - Could you please confirm from where are you checking the revoked entitlements? Are you trying to find the entitlements in identity cube after revocation? If the entitlements are from connected application, Then Sailpoint will trigger deprovisioning request to remove the revoked entitlements and this will not appear in the Identity Cube or the Identity Entitlements. However, The revoked entitlements won’t be removed from SPT_CERTIFICATION_ACTION or SPT_CERTIFICATION_ITEM table. Maybe try using queries like below.


select * from identityiq.spt_certification_item where exception_application='APP_NAME';

Yes I can’t find them in the spt_certification_item table. They are getting disappeared from the cert UI too, that triggered us to check the tables and there we noticed missing records

Could you please share the corresponding certification xml from debug page