Change Requests stuck in the AFX Fulfillment Handler Workflow Node and Workflows Stalled in RSA Identity Governance & Lifecycle
Originally Published: 2020-07-07
Article Number
Applies To
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.0
Issue
SYMPTOMS:
- Change requests that provision using AFX are stuck in the fulfillment phase.
- The change request workflows are stuck in the AFX fulfillment handler node.
- Workflows are flagged as stalled.
- AFX requests are stuck in the V state.
Cause
Not enough memory is available to the ActiveMQ queue during heavy processing of bulk Change Request items which causes messages to get stuck in the ActiveMQ queue intermittently impacting AFX processing and Change Request completion.
Resolution
- RSA Identity Governance & Lifecycle 7.1.1 P07
- RSA Identity Governance & Lifecycle 7.2.0 P02
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
Workaround
- Restart the stuck AFX requests, and
- Manually modify the ActiveMQ memory configuration to prevent future occurrences of this issue.
Restart stuck AFX requests:
Open a support ticket with RSA Identity Governance & Lifecycle Support for a workaround and provide the following information in the case:- Login to a SQL tool such as SQL*Plus or SQL Developer as avuser, and
- Execute the following queries:
These queries will determine the AFX request state of the specific stuck change request:
select * from T_AV_CHANGE_REQUESTS CR where NAME like '%stuck-change-request-name%';
Note the values of CR.ID and CR.CURRENT_STATE returned in the query results and substitute them into the next two queries:
select * from T_AV_CHANGE_REQUEST_DETAILS CRD where CHANGE_REQUESTS_ID=<CR.ID> select * from T_AV_AFX_REQUEST where change_item_id=<CRD.ID>
This query will identify any AFX requests in the V state:
select * from t_av_afx_request where state ='V'
Manually modify the ActiveMQ memory configuration:
- Follow the instructions in the attached ActiveMQ_Memory_Changes.docx document.
- Restart AFX as the afx user:
afx restart
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
Workflows stuck in AFX fulfillment and/or Provisioning nodes in RSA Identity Governance & Lifecycle 509Number of Views RSA Identity Governance & Lifecycle Access Fulfillment Express (AFX) Change Requests that depend on Entitlements Require A… 409Number of Views AFX fulfillment workflow switches to manual fulfillment when using workflow variables in an AFX Connector in RSA Identity … 445Number of Views Queries to detect workflows and change requests that could overload the Workpoint Server in RSA Identity Governance & Life… 274Number of Views Change requests provisioned by AFX remain in "pending action" or "pending verification" in RSA Governance & Lifecycle 185Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Troubleshooting AFX Server issues in RSA Identity Governance & Lifecycle Downloading RSA Authentication Manager license files or RSA Software token seed records
Don't see what you're looking for?