Troubleshooting Identity Governance Access Revocation Errors when Exporting to Identity Manager

Products

• CA Identity Suite

Issue/Introduction

This article provides guidance on troubleshooting and resolving errors encountered during the access revocation process in Identity Governance (IG) systems, specifically when sending revocation requests from IG to Identity Manager (IDM).

Environment

Identity Suite Vapp 14.5
Identity Governance 14.5

Cause

Error Scenario

The error scenario involves a failure in the revocation process, where an ArrayIndexOutOfBoundsException is encountered when attempting to modify a managed object using the WebServiceHandler. This error is typically caused by a missing field in the IDM task configuration. This error is encontered in IG log eurekify.log and also in the IG export on screen log.

Resolution

1. Identify Manager Task Missing Field: Review the audited tasks in Identity Manager View Submitted Tasks to determine which field is missing in the IDM task configuration.
2. Update IDM Task: Add the missing field to the IDM task to ensure that all necessary data is correctly passed from IG.
3. Retry Revocation: Resubmit the Export Process in IG to successfully revoke the user's access in IDM.

Additional Information

For more information on configuring IDM tasks and troubleshooting common issues, refer to the product documentation for Identity Governance and Identity Manager under the relevant IDM/IG versions.