Potential Impact from Salesforce Device Activation Change
RSA customers who leverage RSA ID Plus for Salesforce single sign-on (SSO) may be impacted by a Salesforce security change relating to Device Activation.
Users become deleted from Cloud Admin console and are not resynchronized in the next sync of the Cloud Authentication Service.
Cause
This is is caused by a missing attribute in the Active Directory source. In this particular case, the email address was missing from Active Directory. Email was one of the Synchronize User Attributes, as shown below.
Resolution
Note the list of users in the first screen shot above. In this case, Wilma Flintstone. That user was missing an email address in Active Directory. The solution is to correct the entry in Active Directory to include an email address.
