Identity Manager Environment ID Changes Causing Missing Tasks

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Identity Manager environments may experience missing email tasks, password change tasks, and other unexpected user behavior due to unauthorized or automated changes to the Environment Object Identifier (OID).

This condition manifests as if the environment has been deleted and recreated, resulting in a mismatch between the environment and its associated task data.

Environment

Identity Manager 14.x

Cause

The environment OID is reassigned whenever an Identity Manager Environment (IME) is deleted and recreated. This typically occurs in the following scenarios:

• Manual Intervention: An administrator manually deletes and recreates the IME via the Identity Manager Management Console.
• Cross-System Conflict: A separate Identity Manager installation (e.g., QA, Sandbox, or a secondary node) is incorrectly pointed to the production database and modifies the environment configuration.

Resolution

1. Verify Environment OID: Review the tasksession12_5 table to identify if tasks are associated with different Environment IDs.
   • Note: In recorded instances, OIDs have been observed to change multiple times within a 12-hour window.
2. Restore Database: Restore the Identity Manager database to a known working state from a date prior to the OID change.
3. Secure the System: Once stability is confirmed, implement the following security measures:
   • Change all Identity Manager System Manager passwords.
   • Protect the Identity Manager Management Console using SiteMinder or restricted IP access.
   • Ensure no other Identity Manager instances are pointing to the production database.