How to use the three different checkbox states for containers during an explore and correlate in provisioning manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

When performing an Explore and Correlate in Identity Manager's Provisioning Manager GUI there are three different checkbox states for containers. Each state will perform different actions during the Explore and Correlate. 

 

Environment

Release: 14.x
Component: Identity Manager, Provisioning Manager

Resolution

When selecting containers, if the checkbox is blank Identity manager will ignore the container and all of its unchecked sub containers. If a parent container is in this state, the sub containers under it may be in a different state; blank, gray check or black check. 

If the checkbox is gray with a check mark, Identity Manager will explore/correlate the container but ignore all of its unchecked sub containers. If a parent container is in this state, the sub containers under it may be in a different state; blank, gray check or black check. 

If the checkbox is white with a check mark, Identity Manager will explore/correlate the container and all of its sub containers. If a parent container is in this state, all sub containers below it must be in the same state. If the state of a sub container is altered to gray or blank, it will change the state of the parent container to gray.  

Explore and Correlate issues such as not locating expected users or locating unexpected users are often due to incorrect use of these checkboxes.