IM Template lost when AD User moves OU

book

Article ID: 211741

calendar_today

Updated On:

Products

CA Identity Suite CA Identity Manager

Issue/Introduction

When a Microsoft Active Directory (AD) User moves between OU's (Object Units) via the "Active Directory Users and Computers" interface the user loses their correlation with the CA Identity Manager (IM) Account Template.

Cause

The IM Active Directory Endpoint Configuration has an option to "Detect Account Move Across Containers".  When selected this will ensure that a user remains correlated with their Account Templates when they move between OUs.  However, a code issue has been identified where the OU itself is not considered, so if the OU moves the correlation is lost.

 

Environment

Release : 14.3 CP2

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Resolution

14.3 CP2 Fix "HF-DE497432" has been released to address this issue.

Additional Information

Please note that when running and Explore and Correlate (E&C) from Provisioning Manager, you must ensure that the root is fully selected (checkbox with a black tick, not just greyed out) for the feature "account movement across OU's" works. this means all containers under the root node will be part of E&C operation.

Example of a Greyed out Check Box (which will NOT work):

Attachments