ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Multi-valued attributes overwritten with workflow enabled

book

Article ID: 145725

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite

Issue/Introduction

User has roles 1,2

User submits request 1 which adds role 3 - workflow pending

User submits request 2 which adds role 4 - workflow pending

Approver approves request 1

User now has roles 1,2,3

 

Approver then approves request 2

User now has roles 1,2,4

The user has now lost access to role 3 

Cause

For multi-valued attribute, the new values always wipe out the old values when user object is persisted. This behavior is by design. The multi-valued attribute allows duplicate values, for example, [1, 2, 2, 1, 0]. One request may add more values and another one may remove some values.

Environment

Release : 14.X

Component : IdentityMinder(Identity Manager)

Resolution

This is a functional limitation of the application and is working as designed.  In order to add multiple-values the request must be made within the same workflow.  

The use case is as such:

User submits request 1 - requesting to add roles 1,2,3; workflow is pending

Approver approves request 1

User now has roles 1,2,3

Additional Information

Refer to DE446796 for further information