Delegator Information Storage and Error Resolution in Identity Manager

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

When managing approver delegations within the Identity Manager User Console, users may encounter errors while attempting to add, view, or modify delegates. This issue occurs when the imDelegators attribute in the user store is improperly formatted.

Environment

Identity Manager 14.x & 15

Cause

The imDelegators attribute is a multi-valued string. The system fails to process the attribute correctly when multiple Distinguished Names (DNs) are concatenated into a single attribute instance (e.g., delimited by commas or semicolons). Each DN must instead be stored in its own separate instance of the imDelegators attribute.

Resolution

To resolve errors related to approver delegations, you must correct the data format in the User Store.

1. Access your LDAP or database User Store.
2. Locate the user account experiencing the delegation issues.
3. Identify the imDelegators attribute.
4. Remove any entries that contain multiple delimited DNs.
5. Ensure that each unique DN is stored in a separate, independent imDelegators attribute instance.
6. Save the changes.

Additional Information

Attribute Technical Details The following technical specifications apply to the imDelegators attribute:

• Physical Name: imDelegators
• Well-Known Name: %DELEGATORS%
• Data Type: String
• Multi-Valued: True
• Required: False
• Read Only: False
• System: True