topic Re: Loose role - Identity awareness in General Topics

Loose role - Identity awareness

Bastien_Lauc — Thu, 14 Dec 2023 14:29:37 GMT

Hello,

I have a rule with source an access role where there are 2 AD groups.
A user tells me that he no longer arrives has matched the rule while he belongs to one of the 2 groups of the AD.
I saw in the logs that one moment he loses in his roles, the access role in question and it does not come back.
To work around the problem, I added in the rule an access role with its AD account in source (it works).
How can this problem be corrected?

Best Regards,

Bastien

Re: Loose role - Identity awareness

Chris_Atkinson — Sat, 16 Dec 2023 01:48:01 GMT

Please share some additional information:

- Gateway version & Jumbo

- Identity source type: IDC or ADQuery - admin creds valid?

- What does 'pdp monitor user UserName' show?

- How many LDAP account units are there configured?

Re: Loose role - Identity awareness

Bastien_Lauc — Mon, 18 Dec 2023 13:30:31 GMT

Hello,

Gateway version r81.10

Identity source Identity collector

With pdp monitor user UserName, I don't see the role

There is only one LDAP account units

Best Regards,

Bastien

Re: Loose role - Identity awareness

Chris_Atkinson — Mon, 18 Dec 2023 13:42:10 GMT

If you are already using a recent JHF take for the Gateway and IDC agent version I would suggest a live session with TAC to troubleshoot the issue further.

Re: Loose role - Identity awareness

Bastien_Lauc — Mon, 18 Dec 2023 13:50:19 GMT

TAC 041

Re: Loose role - Identity awareness

Chris_Atkinson — Tue, 19 Dec 2023 12:45:54 GMT

Take 41 is a valid take# for R81.20.

I assume instead this is your abbreviated IDC version?