Resolving Case Sensitivity in Certification Campaign Filtering - Identity Governance

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When creating certification campaigns in Identity Governance, you may find that the application treats group names as case-sensitive (e.g., App_MPA does not equal APP_MPA). Because the filtering interface does not natively support "OR" conditions, users often encounter difficulty when multiple variations of a group name exist.

Environment

Identity Manager 14.5

Identity Governance 14.5

Cause

This issue occurs because the resource group filtering logic interprets names literally and requires an exact match. Without the ability to define multiple group names in a single filter condition, you would normally be required to create multiple campaigns to cover all variations.

Resolution

To work around this limitation, use regular expressions (Regex) in the group name value field. This allows you to match multiple naming variations with a single pattern.

1. Navigate to the Certification Campaign creation screen.
2. When defining the resource group filter, locate the Value field.
3. Instead of entering a specific group name, enter a regular expression that captures the desired variations.
   • Example: To capture App_MPA and APP_MPA, use the following regex: [Aa][Pp][Pp]_MPA.*
4. Test your pattern using a validation tool (such as regex101) to ensure it includes all valid variations and excludes unauthorized groups.
5. Save the campaign configuration.

Note: The regex pattern [Aa][Pp][Pp]_MPA.* ensures that the first three characters ('App') are matched regardless of case, while 'MPA' remains constant.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.