After update to 14.5 SP1 unable to create or update universe in Identity Governance

Products

• CA Identity Suite
• CA Identity Manager
• CA Identity Governance

Issue/Introduction

Error visible in the log related to, in this case, custom connector

12:30:36,800 INFO  [com.eurekify.connectors.ccl.session.SessionFactoryImpl] (default task-9) Testing connection using the following connection settings: 
(...)
12:30:37,155 ERROR [io.undertow.request] (default task-224) UT005023: Exception handling request to /iam/im/ws/wsconfiguration/identityEnv: javax.servlet.ServletException: java.lang.IllegalArgumentException: Object type Roles is not valid for extension <custom connector name>
    at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:432)
    at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:370)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:389)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:342)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:229)
    at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
    at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
    at io.opentracing.contrib.jaxrs2.server.SpanFinishingFilter.doFilter(SpanFinishingFilter.java:52)
(...)
Caused by: java.lang.IllegalArgumentException: Object type Roles is not valid for extension <custom connector name>
    at com.ca.iam.model.impl.ExtensionManager.classInfo(ExtensionManager.java:304)
    at com.ca.iam.model.impl.ExtensionManager.classInfo(ExtensionManager.java:35)
    at com.ca.identitymanager.webservices.api.WSConfiguration.configureWebService(WSConfiguration.java:118)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
(...)

Environment

14.5 IM

Resolution

Error happens due to inconsistency between connector .jar in IM and provisioning data.

Generating the latest jar (by running RoleDefGenerator) will ensure both data sources are identical, command below:

../IdentityManager/tools/RoleDefinitionGenerator/bin/RoleDefGenerator.sh -n -d <domain> -u <etaadmin login> -h <IM IP> "<custom connector name>"

Please check link which contains information about Role Definition Generator Command.