Inconsistency In Status Of Accounts Imported To OIA From OIM

(Doc ID 2322199.1)

Last updated on JANUARY 09, 2018

Applies to:

Oracle Identity Analytics - Version 11.1.1.5.8 and later
Information in this document applies to any platform.

Goal

After doing a full import of accounts for a particular resource from OIM into OIA we have noticed a number of cases where the account status as shown in OIA does not match that in OIM. In particular this seems to affect the following scenario. A user has one account for the resource that is in a revoked status and another identical account provisioned later that is in a provisioned status. The provisioned account is the most recent and reflects the actual account status for that user.

In many (but not all cases) where this condition exists, after we have loaded all accounts into OIA via the normal import job we see that the account in OIA is showing in a suspended (revoked) state even though the user does have an active (provisioned) account.

This is a severe issue for us as this data is being used for performing live toxic combination (segregation of duties) checks as required for regulatory reasons, and because of this these checks will not detect all such policy violations. This also impacts the genera confidence the business have of the general quality of the data loaded into OIA.
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms