Randomly duplicated user attribute SQL inserts

Products

• CA Identity Manager

Issue/Introduction

We uncovered an issue with certain tasks in IdentityManager. One portion of our PX Rules deals with removing a user attribute called <Attribute_name>. At some point this year, IM started randomly duplicating attribute removal on top of the legitimate attribute removal causing hundreds of account to have a null <Attribute_name> attribute.

Attaching DEBUG logs from our DEV environment showing us modifying a user and it randomly duplicating the attribute removal. This PX rule in question has not changed in 13 years.

Environment

Release : 14.4

Resolution

We set up a simplified policy express policy

Based on an attribute value, we can now add or remove a value from another attribute.

At this time you would need to modify your policy express policy for account types to be manipulated like our simplified example.