How to Work Around Group Name Case Sensitivity when Creating a Certification Campaign in Identity Governance

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When creating a certification Campaign and defining the resource groups, we see that the AD groups are named two different ways: App_MPA* and APP_MPA*  

The application is treating the names with case sensitivity “App_MPA” =/= “APP_MPA” 

Furthermore, the filtering only provides for an AND condition (see screenshot attached). 

This would then require two separate campaigns, one for each resource group name: 

App_MPA 

APP_MPA 

How do we turn off the case sensitivity treatment for the group names?

Environment

Release:
Identity Manager
Identity Governance

 

Resolution

To workaround this issue we will use a regular expression. The benefits of this are:

1. The value field is able of parsing regex

2. With a single regex expression we are able to define multiple possible values

 

In this example, the assumptions are: 

1. Both begin with capital A 

2. the following 2 characters are 'p' case insensitive 

3. '_' follows 

4. 'MPA' is always capital 

 

To validate, you can use https://www.regextester.com/

In the regular expression box put: [A][pP][pP]_[MPA].* Then, to test try both: 

App_MPA.* 

APP_MPA.* 

and also some illegal ones like: 

app_mpa 

 

You might want to go further and do the following regex (where also the . and * are mandatory): 

[A][pP][pP]_[MPA].*