Hi,
today we have been facing an issue with multiple provisioning requests to the same repository. We have been automatically assigning several Roles to a single user. As a result, several privileges from AD were assigned to the user as well (3 in our example).
The IDM then seems to start 3 parallel provisioning requests for AD - one for each assigned privilege. As they are started (almost) in parallel, every tasks seems to think that no AD user is currently present. So all three are trying to provision the user to AD. The first one wins, the others unfortunately fail, because the account already exists.
In the meantime we have found a workaround for our special use case, but this seems a general issue to me. I was wondering whether somebody else faced this problem. Is there a way to serialize the provisioning requests, so that the second request for provisioning an AD privilege ist not started before the first request has finished?
Best regards
Holger
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.