• State Not Answered
  • Replies replies
    4
  • Subscribers subscribers
    16
  • Views views
    237
  • Users 0 members are here

Identity Manager automated fulfillment - always goes to manual fulfiller

SaifeeK

Identity Manager AE Permission Collector is configured as application source to collect idm roles as permissions in IG catalog. Permissions are requested using Access Request or via Business Role.

For fulfillment Identity Manager automated fulfillment with manual fallback is selected. when requesting access through Access Request, the fulfillment stays in pending mode forever with status 'Sending for fulfillment via Identity Manager' and nothing occurs even after collection + publish. The requested access keep showing in Fullfillment -> Requests

When permission is requested by business role, it always ends up with manual fallback fulfiller instead of using automated fulfillment.

Is there another configuration necessary for the automated fulfillment that I have missed?


For collecting IGA identities i am using 'eDirectory Identity Collector', are there any additional attributes that should be collected from Idvault to make the automated fulfillment work?

The applications have "Identity Manager Automated" selected.

Fulfillment Status tab looks like this, First one is initiated by Business role, second by Access Request

Parents
  • 0  

    Hello,
       During the processing of the fulfillment request, data of the permission and the user are examined to confirm they can be fulfilled via the IDM Automated fulfillment.


    Before opening a Service Request to investigate:
    1) What specific identity Collectors are being utilized?
    2) What strategy is being utilized (Publish and Merger or Publish without Merging) for the Identity Collector
    3) Is the fulfillment for a Role or Resource?
    4) Is the fulfillment for a Permission (Role or Resource) that is associated to the IDM AE collector or one (1) IDM Drivers


    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    OpenText Cybersecurity

Reply
  • 0  

    Hello,
       During the processing of the fulfillment request, data of the permission and the user are examined to confirm they can be fulfilled via the IDM Automated fulfillment.


    Before opening a Service Request to investigate:
    1) What specific identity Collectors are being utilized?
    2) What strategy is being utilized (Publish and Merger or Publish without Merging) for the Identity Collector
    3) Is the fulfillment for a Role or Resource?
    4) Is the fulfillment for a Permission (Role or Resource) that is associated to the IDM AE collector or one (1) IDM Drivers


    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    OpenText Cybersecurity

Children

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.