vAPP: Unable to import IdentityEnv.zip into IDM Management Console--User Store points to the Prov DSA
Article ID: 202392
Updated On:
Products
Issue/Introduction
On vAPP and as part of SSO upgrade to resolve policy store integrity errors, we did delete IdentityEnv.zip. But when trying to re-import the same IdentityEnv.zip file into IDM management console, we are facing issues.
In the Management console > Directories > UserStore, we see that the user directory appears to be configured to point to the ProvStore DSA rather than to the user Store DSA. We do not know how it came to point to the incorrect DSA.
Resolution
1. Disable policy store update was previously selected, in addition to different restorations done on the SM side. This led to inconsistency where IME and Directories were defined in SM but not in IM.
2. XPSSweeper used to delete some orphan objects
3. The date on the IM server runningwas not synchronized and had yesterday's date.
4. Hosts file on the policy server was configured with caim-srv pointing to incorrect server.
Fixing all of the above and restarting IM created the default directories and IME in both IM and SM.
Feedback
