How to Reassign Identity Governance Certification Tasks from a Non-Existent or Invalid User

Products

• CA Identity Governance

Issue/Introduction

During an active certification campaign, review tasks are incorrectly assigned to a non-existent or invalid user ID (e.g., a user who has been deleted or never existed in the system). Because the original reviewer cannot authenticate, they cannot perform a standard reassignment of their tasks. As a result, these review items become "orphaned," blocking the progress of the campaign.

Environment

• CA Identity Governance (All versions)
• Identity Suite Virtual Appliance

Cause

Review tasks were assigned to an invalid user ID during campaign initialization, potentially due to outdated data in the universe or incorrect RACI configurations in the Certification Template.

Resolution

To resolve this issue, a System Administrator or Campaign Owner must manually reassign the orphaned tasks to a valid user account (e.g., an Admin account like AD1/EAdmin) using the administrative tools.

Step 1: Identify the Orphaned Tasks

1. Log in to the Identity Governance (IGA) Portal with administrative privileges.
2. Navigate to Administration > Workflows.
3. Search for all "Pending" tasks associated with the specific campaign name.
4. Filter the results where the Reviewer matches the invalid user ID.

Note: If the tasks cannot be located via the UI, a database administrator can query the Identity Governance database (e.g., BFTask table) to identify tasks where the reviewer ID matches the invalid user and the BusinessFlowId matches the active campaign.

Step 2: Perform Bulk Reassignment

1. In the administrative view, select all identified orphaned tasks.
2. Select the Reassign action.
3. Specify the Target Reviewer (e.g., a valid administrator or the correct manager).
4. Confirm the reassignment.

Step 3: Verification

1. Verify that the tasks now appear in the Worklist of the target reviewer.
2. Confirm that the tasks are no longer associated with the invalid user ID.

Step 4: Prevention

To prevent this issue in future campaigns:

1. Review the Certification Template used for the campaign.
2. Ensure that the User Filtering logic or RACI configuration excludes inactive or non-existent users.
3. Refer to the documentation on Defining Reviewers for Certification to ensure only authorized, active users are selected for reassignment.

Additional Information

Certification Reassignment shows multiple options of the same user