Hello,
So, we got this strange issue in our environment. We have created numerous Access Policies (AP) throughout our implementation of OIM. Everything seems to be working just fine for 98% of the times the Access Policies is being triggered through the "Evaluate Policies" scheduled task. However, sometimes, and normally the same resources, is for some reason not being provisioned at all - that is, all the other resources has been provisioned, but it might be missing a few. Wierd. This just happens from time to time, no pattern discovered, so its quite hard to recreate the issue as well. We've added more logging, however it seems not to be enough, as nothing interessting came out of that.
Example:
AP 1 should give these resources:
- Cool resource
- Wierd resource
- Mail resource
- AD resource
- Linux resource
But, sometimes, only these will be provisioned for the user:
- Cool resource
- Mail resource
- AD resource
- Linux resource
So, the "Wierd resource"-resource has been ignored and skipped - its not even present in a strange state on the user's "Account". What the..
Any ideas or how to improve to look into this strange issue? Or, even better, anyone got some suggestion regarding what this could be?
Regards,
Vegard