Scheduling certificate results in pending state and receiving null pointer exception

Which IIQ version are you inquiring about?

8.2

Share all details about your problem, including any error messages you may have received.

Hi All,
We are receiving errors everytime while scheduling a certification mostly during group owner certification with the error as mentioned below:

sailpoint.request.RequestHandler:209 - sailpoint.request.RequestPermanentException: NullPointerException
	at sailpoint.request.CertificationBuilderExecutor.execute(CertificationBuilderExecutor.java:84)
	at sailpoint.request.RequestHandler.run(RequestHandler.java:163)
Caused by: java.lang.NullPointerException

Can you please help on this as how we can resolve this issue

Regards
Amit

Hi @ayadav_12,

Are you using any custom email template or any rule in group owner certification?

Regards,
Arun

Hi @Arun-Kumar ,

No we are not using template and there’s no rule defined. It’s failing if we are selecting any group for scheduling the certificate.

Regards
AMit

Hi @ayadav_12,

Which options are you selecting during the certification creation process? share the screenshot
Could you please share the complete log?

Regards,
Arun

1 Like

Hi @ayadav_12,

Is it possible for you to share the configuration XML?

Thanks

Hi @ashutosh08

<CertificationDefinition created="" id="" name="Targeted Certification [8/22/24, 7:01 PM]">
  <Attributes>
    <Map>
      <entry key="activePeriodDurationAmount" value="1"/>
      <entry key="activePeriodDurationScale" value="Month"/>
      <entry key="allowCertificationEntityBulkAccountRevocation" value="false"/>
      <entry key="allowCertificationEntityBulkApprove">
        <value>
          <Boolean>true</Boolean>
        </value>
      </entry>
      <entry key="allowCertificationEntityBulkClearDecisions" value="true"/>
      <entry key="allowCertificationEntityBulkRevocation" value="true"/>
      <entry key="allowListViewBulkAccountRevoke" value="false"/>
      <entry key="allowListViewBulkApprove" value="true"/>
      <entry key="allowListViewBulkClearDecisions" value="true"/>
      <entry key="allowListViewBulkMitigate" value="false"/>
      <entry key="allowListViewBulkReassign" value="true"/>
      <entry key="allowListViewBulkRevoke" value="true"/>
      <entry key="allowProvisioningMissingRequirements" value="false"/>
      <entry key="allowSelfCertification" value="All"/>
      <entry key="assimilateBulkReassignments" value="false"/>
      <entry key="autoSignOffWhenNothingToCertify" value="true"/>
      <entry key="automateSignOffOnReassignment" value="true"/>
      <entry key="automateSignoffPopup" value="true"/>
      <entry key="automaticClosingEnabled" value="false"/>
      <entry key="automaticClosingSigner" value="spadmin"/>
      <entry key="backupCertifier" value="11760235"/>
      <entry key="bulkReassignmentEmailTemplate" value="EmailTemplate-FrameworkAccessReviewBulkReassignment"/>
      <entry key="certOwner" value="11760235"/>
      <entry key="certificationAutoApprove" value="false"/>
      <entry key="certificationDelegationReview" value="false"/>
      <entry key="certificationDisableDelegationForwarding" value="true"/>
      <entry key="certificationEntityDelegationEnabled" value="true"/>
      <entry key="certificationItemDelegationEnabled" value="false"/>
      <entry key="certificationLimitReassignments" value="true"/>
      <entry key="certificationMitigationDeprovisionEnabled" value="false"/>
      <entry key="certificationMitigationEnabled" value="false"/>
      <entry key="certificationMitigationPopupEnabled" value="false"/>
      <entry key="certificationNameTemplate" value="Group Owners Targeted Certification [${fullDate}]"/>
      <entry key="certificationReassignmentLimit" value="4"/>
      <entry key="certificationShowRecommendations" value="false"/>
      <entry key="certificationSignOffApprovalEmailTemplate" value="EmailTemplate-Framework-CertificationSignOffApproval"/>
      <entry key="certificationType" value="Focused"/>
      <entry key="certifierOwnerAccount" value="ApplicationOwner"/>
      <entry key="certifierOwnerEntitlement" value="EntitlementOwner"/>
      <entry key="certifierOwnerRole" value="RoleOwner"/>
      <entry key="certifierType" value="Owner"/>
      <entry key="certifyAccounts" value="false"/>
      <entry key="certifyEmptyAccounts" value="false"/>
      <entry key="challengePeriodEnabled" value="false"/>
      <entry key="completeCertificationHierarchyEnabled" value="false"/>
      <entry key="electronicSignatureRequired" value="false"/>
      <entry key="enableAccountRevokeAction" value="false"/>
      <entry key="enableApproveAccountAction" value="false"/>
      <entry key="enablePartitioning" value="true"/>
      <entry key="entitlementFilter">
        <value>
          <Filter operation="EQ" property="value" value="Security Administrator"/>
        </value>
      </entry>
      <entry key="entitlementFilterValues">
        <value>
          <List>
            <Map>
              <entry key="operation" value="Equals"/>
              <entry key="property" value="value"/>
              <entry key="value" value="Security Administrator"/>
            </Map>
          </List>
        </value>
      </entry>
      <entry key="entitlementGranularity" value="Value"/>
      <entry key="entitySelectionType" value="Filter"/>
      <entry key="excludeBaseAppAccounts" value="false"/>
      <entry key="excludeInactive" value="false"/>
      <entry key="filterLogicalEntitlements" value="false"/>
      <entry key="flattenManagerCertificationHierarchy" value="false"/>
      <entry key="includeAdditionalEntitlements" value="true"/>
      <entry key="includeCapabilities" value="false"/>
      <entry key="includePolicyViolations" value="false"/>
      <entry key="includeRoleHierarchy" value="false"/>
      <entry key="includeRoles" value="false"/>
      <entry key="includeScopes" value="false"/>
      <entry key="includeTargetPermissions" value="false"/>
      <entry key="mitigationDurationAmount" value="1"/>
      <entry key="mitigationDurationScale" value="Month"/>
      <entry key="mitigationExpirationEmailTemplate" value="EmailTemplate-Framework-MitigationExpiration"/>
      <entry key="notifyRemediation" value="false"/>
      <entry key="processRevokesImmediately" value="false"/>
      <entry key="recommendationsGenerated" value="false"/>
      <entry key="remediationPeriodDurationAmount" value="1"/>
      <entry key="remediationPeriodDurationScale" value="Month"/>
      <entry key="remediationPeriodEnabled" value="true"/>
      <entry key="requireApprovalComments" value="false"/>
      <entry key="requireBulkCertifyConfirmation" value="true"/>
      <entry key="requireMitigationComments" value="false"/>
      <entry key="requireReassignmentCompletion" value="false"/>
      <entry key="requireRemediationComments" value="false"/>
      <entry key="saveExclusions" value="false"/>
      <entry key="sendPreDelegationCompleteEmails" value="false"/>
      <entry key="stagingEnabled" value="true"/>
      <entry key="subordinateCertificationEnabled" value="true"/>
      <entry key="suppressEmailWhenNothingToCertify" value="true"/>
      <entry key="suppressInitialNotification" value="true"/>
      <entry key="useApprovalRule">
        <value>
          <Boolean></Boolean>
        </value>
      </entry>
    </Map>
  </Attributes>
  <Description>Targeted Certification</Description>
  <Owner>
    <Reference class="sailpoint.object.Identity" id="" name=""/>
  </Owner>
</CertificationDefinition>

Is this what you are refering right?

Hi @ashutosh08 & @Arun-Kumar

Can you please help

Check the owner of “Security Administrator” entitlement?

Hi @Arun-Kumar ,

The owner is mentioned for the group. It’s still throwoing the null pointer error as shown below:
WARN Thread-1050310 sailpoint.request.RequestHandler:209 - sailpoint.request.RequestPermanentException: NullPointerException
at sailpoint.request.CertificationBuilderExecutor.execute(CertificationBuilderExecutor.java:84)
at sailpoint.request.RequestHandler.run(RequestHandler.java:163)
Caused by: java.lang.NullPointerException

Regards
Amit

Hi @ayadav_12,

Can you just try to run it for a single entitlement some other from what you are selecting now.

Check once are you seeing any task result with similar name of certificate with any specific error?

Also, can you check if there is any extra log trace that you can share?

Thanks

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.