Duplicate entitlements are created when an Application has 'Complete Manual Activity Before Collection' enabled in RSA Identity Governance & Lifecycle

[#1]

Article Number

000035235

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.0.0, 7.0.1, 7.0.2
 

Issue

When manually adding entitlements to a user through the user interface where the Application is defined with Complete Manual Activity Before Collection set to Yes (Resources > Applications > General tab), the entitlements are duplicated after running the entitlement collectors.

EXAMPLE
 

In this example, application APP1 has Complete Manual Activity Before Collection set to Yes.

 

Image description

The app-role Bug is manually added to Cherry Blossom prior to the APP1 entitlement collection run
 

Image description

After the entitlement collection run, the app-role is now duplicated in the user's access screen. (Users > Users > {user name} > Access tab).
 

Image description

NOTE: The Complete Manual Activity Before Collection feature is used when an application can only be collected on a very infrequent basis and there is a need to add entitlements to a user prior to when the collection can be run.

Cause

This is a known issue reported in engineering ticket ACM-71714.
 

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle versions and patch levels:

• RSA Identity Governance & Lifecycle 7.0.1 P03
• RSA Identity Governance & Lifecycle 7.0.2 P01
• RSA Identity Governance & Lifecycle 7.1.0

Notes

See related RSA Knowledge Base Articles:

• 000038741 -- Entitlements manually added when an Application has 'Complete Manual Activity Before Collection' enabled do not show in the Application Accounts tab in RSA Identity Governance & Lifecycle
• 000038742 -- Entitlements manually added when an Application has 'Complete Manual Activity Before Collection' enabled are not removed when no longer collected in RSA Identity Governance & Lifecycle