Workflow Terminated Early errors "Access Requests"

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Has anyone ever dealt with requests that seemingly complete but have a state of ‘terminated’ on the logs? these requests throw zero errors and nobody knows they failed until the requester happens to look at their requests in IDN and reports it to an admin.

The problem I’m running into is I’m seeing these often on our AD/Azure requests and without any real logging to figure out what is failing where. if anyone knows any information on how you can diagnose the underlying problem it would be very helpful for my troubleshooting. At this point I’m not sure if its a connectivity bug on our end, or an API issue on the IDN side etc.

Example logs below for a request that 'terminated successfully" haha.

image
image1138×451 16.3 KB

image
image898×427 15.2 KB

image
image1726×161 15.2 KB

image
image823×294 14.3 KB

2

The approval workflow seems to have been completed as it’s showing green dot on Approved by Manager. So the issue is probably with AD provisioning.

Can you please check IQservice logs for more details on exact error ?

Maybe your service account doesn’t have permission to add members to that group or something on AD side is erroring out while provisioning the access.

1 Like
3

This type of issue occurs due to SailPoint not able update some of the AD account attributes during the provisioning request. Please check IQService logs.

1 Like
4

Thank you both for the replies. I have looked at the IQtrace file for our production servers and do not see anything of note in the logs. mostly just noise from our scanning solution tenable. I’ve engaged sailpoint support for further assistance but will continue to look at our AD logs to see if theres anything on that end as well.

Thanks again,
Nick

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.