Audit-De-Provisioning Report - Data Collection and Task Requirements

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

The "Audit-De-Provisioning" report, intended to display users and accounts that have been de-provisioned, returns no data despite active de-provisioning activities. Troubleshooting typically shows that other audit reports function correctly and tasks in View Submitted Tasks (VST) are marked as completed. Users may also confirm that endpoint accounts were successfully removed in Provisioning Manager, yet they do not appear in this specific report.

 

Environment

• Product: Identity Manager
• Release: 14.x
• Component: Reporting (Auditing)
• Reporting Server: SAP Business Objects up to 12.6.7 or JasperSoft (12.6.8 and later)
• Database Type: MSSQL, Oracle

Cause

The "Audit-De-Provisioning" report is specifically designed to capture only the EnableDisableUserEvent where the state is Disable. This event is triggered exclusively by the Enable/Disable User task within the User Management menu. De-provisioning actions performed via the Modify User task (e.g., un-checking the "Enabled" box) do not trigger the specific event required for this out-of-the-box (OOTB) report to populate.

Resolution

To ensure de-provisioning data appears in the Audit-De-Provisioning report, use the following procedure:

1. Navigate to the User Management task menu.
2. Select the Enable/Disable User task.
3. Locate the subject user and set the state to Disable.
4. Submit the task and verify the event captures in the audit database.

 

Additional Information

• JasperSoft (IM 12.6.8 and later): Users have the option to view and modify report logic using JasperSoft Studio, allowing for the inclusion of additional events (like Modify User) if required.
• Resources: For instructions on editing reports, refer to the TIBCO JasperSoft Community or official TIBCO Software Inc. training materials.