Provisioning Role and Account Template with same name causes duplicate key error when importing from IM to IG

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Suite

Issue/Introduction

When attempting to import from Identity Manager into Identity Governance the import fails with "Fail to Import from CSV files [EXC]: com.eurekify.command.CommandExecutionException, [MSG]: org.springframework.dao.DuplicatekeyException: PreparedStatmentCallback; SQL [INSERT INTO ConfigurationRoles (ConfigurationID, RoleID, RoleName, RoleOwner, RoleOrganization, RoleType, RoleFilter, RoleDescription, RoleReviewer, RoleOrganization2, RoleOrganization3, RoleCreateDate, RoleApproveCode, RoleApprovedDate, RoleExpirationDate) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)]; Cannot insert duplicate key row in object 'dbo.ConfigurationRoles' with unique index 'IX_CFG_ROLES'. The duplicate key value is (2464, Linux ACME01F).; nested exception is java.sql.BatchUpdateException: Cannot insert duplicate key row in object 'dbo.ConfigurationRoles' with unique index 'IX_CFG_ROLES'. The duplicate key value is (2464, Linux LJS32F)."

For example:

1. Create a Linux Endpoint with name: “Linux ACME01F”
2. Create Provisioning Role with same name: “Linux ACME01F”
3. Same for Account template: “Linux ACME01F”
4. Create a Universe in IG and connection to Import from IM adding the Linux Connector
5. The import will fail with error "with unique index 'IX_CFG_ROLES'. The duplicate key value is (2464, Linux ACME01F)."  (see eurekify.log)
6. Under Events from Import see the message: Fail to Import from CSV files [EXC]: com.eurekify.command.CommandExecutionException, [MSG]: org.springframework.dao.DuplicatekeyException: PreparedStatmentCallback; SQL [INSERT INTO ConfigurationRoles (ConfigurationID, RoleID, RoleName, RoleOwner, RoleOrganization, RoleType, RoleFilter, RoleDescription, RoleReviewer, RoleOrganization2, RoleOrganization3, RoleCreateDate, RoleApproveCode, RoleApprovedDate, RoleExpirationDate) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)]; Cannot insert duplicate key row in object 'dbo.ConfigurationRoles' with unique index 'IX_CFG_ROLES'. The duplicate key value is (2464, Linux ACME01F).; nested exception is java.sql.BatchUpdateException: Cannot insert duplicate key row in object 'dbo.ConfigurationRoles' with unique index 'IX_CFG_ROLES'. The duplicate key value is (2464, Linux LJS32F).

Cause

By CA IG documentation IG associates as Roles Provisioning Roles and Account Templates.

Environment

Release : 14.2, 14.3

Component : GovernanceMinder(Role & Compliance Manager)

Resolution

To resolve this we will need to rename either the Provisioning Role or the Account Template to not match.  You can use the Provisioning Manager to update the names of either roles or templates:






Once renamed the Import from IDM into Governance should work as expected.

Additional Information

PLEASE NOTE:
CAUTION should be used when renaming either Provisioning Roles or Account Templates!  References to each will need to be updated after the rename to prevent failures of actions that rely on the renamed Role or Template.