search cancel

Multi-valued attributes overwritten with workflow enabled


Article ID: 145725


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite


User has roles 1,2

User submits request 1 which adds role 3 - workflow pending

User submits request 2 which adds role 4 - workflow pending

Approver approves request 1

User now has roles 1,2,3


Approver then approves request 2

User now has roles 1,2,4

The user has now lost access to role 3 


For multi-valued attribute, the new values always wipe out the old values when user object is persisted. This behavior is by design. The multi-valued attribute allows duplicate values, for example, [1, 2, 2, 1, 0]. One request may add more values and another one may remove some values.


Release : 14.X

Component : IdentityMinder(Identity Manager)


This is a functional limitation of the application and is working as designed.  In order to add multiple-values the request must be made within the same workflow.  

The use case is as such:

User submits request 1 - requesting to add roles 1,2,3; workflow is pending

Approver approves request 1

User now has roles 1,2,3

Additional Information

Refer to DE446796 for further information