Identity Manager: Provisioning Server Inbound Notification Object Generation Failure

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

Identity Manager Provisioning Server (IMPS) fails to generate inbound notification objects or generates generic/incorrect objects (e.g., "Provisioning Modify Object") instead of specific events like "Modify Account" or "Modify Global User." This behavior typically occurs when the "Audit Logging Configuration" object is corrupt, incomplete, or missing. This configuration object controls how provisioning actions map to notification event types and determines what optional metadata is included in the notification payload.

Environment

Identity Manager 14.x & v15

Cause

The "Audit Logging Configuration" object (stored within the Provisioning Server's common objects namespace) has become corrupted or is missing required attributes.

This object is not intended for manual customer edits; manual modifications can lead to inconsistent notification behavior.

Resolution

Follow these steps to rebuild the Audit Logging Configuration object using the EtaLoadNotificationConf utility.

1. Delete the Corrupt Configuration Object:

   • Use an LDAP browser (such as JXplorer or Apache Directory Studio) to connect to the Provisioning Server.
   • Navigate to and delete the following DN: eTConfigName=Audit Logging Configuration,eTConfigContainerName=Configuration,eTNamespaceName=CommonObjects,dc=im,dc=eta

2. Rebuild the Object via Command Line:

   • Open a command prompt or terminal and navigate to the Provisioning Server bin folder.
   • Execute the etaloadnotificationconf.exe utility using Global User credentials:

     etaloadnotificationconf.exe user=GLOBAL_USER_NAME pwd=GLOBAL_USER_PASSWORD

   • Note: Replace GLOBAL_USER_NAME and GLOBAL_USER_PASSWORD with valid administrative credentials.

3. Restart Services:

   • Restart the Identity Manager Provisioning Server services to apply the configuration changes.

4. Verification:

   • Perform a provisioning action (e.g., modify an account) and verify that a specific notification object is now generated in the inbound queue.