Global User Creation Failure in Provisioning Due to AttributeNotPresentException

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Attempts to create a new global user by assigning a provisioning role may fail. While the UI may not display a clear error, the Application Server log during service startup or user creation will contain an AttributeNotPresentException. Existing global users are unaffected for attribute updates, but new creation is blocked by invalid attribute mappings.

Symptoms The application server log displays: ERROR [im.plugins.IMEnvironmentInitializerPlugin] Exception in configuring Auto Inbound: This method requires the presence of an attribute which was not provided. The attribute is named %DELEGATORS%.: AttributeNotPresentException: This method requires the presence of an attribute which was not provided. The attribute is named %DELEGATORS%.

Environment

Identity Manager

Cause

The default provisioning mapping is incorrectly configured. For example if the %DELEGATORS% attribute is not defined in the Provisioning XML (Prov XML) but remains in the Identity Manager environment settings after migration, the initializer plugin fails to configure Auto Inbound, preventing user creation.

Resolution

To resolve this issue, remove the missing or incorrect attribute mapping in the Identity Management Console:

1. Log into the Identity Manager Management Console.
2. Navigate to Environments > [Your Environment].
3. Go to Advanced Settings > Provisioning.
4. Locate for example the mapping for %DELEGATORS% or any other attribute mentioned in the AttributeNotPresentException.
5. Delete the incorrect mapping.
6. Restart the Identity Manager environment to apply changes.