Endpoint Entitlement Count Incrementation Issue

[Sanjeevini]

Hello,

After adding an Advanced filter in 'groupImportMapping' for AD connection, we've observed that after each execution of the recon job(Access Import), the entitlement count under the endpoint continues to increase by one.

Here's the mapping we have:
{
"entitlementTypeName": "memberOf",
"importGroupHierarchy": "true",
"performGroupAccountLinking": "true",
"incrementalTimeField": "whenChanged",
"advanceGroupFilter": {
"memberOf": {
"OU=Groups,OU=Root,DC=genredev,DC=local": [
"(&(objectClass=group)(CN=*QlikView*))"
]}},
"mapping": "memberHash:member_char,entitlement_value:distinguishedName_char,displayname:cn_char,customproperty5:sAMAccountName_char,customproperty6:objectGUID_Binary,customproperty7:objectSid_Binary,customproperty8:displayName_char,customproperty11:description_char,description:description_char,updatedate:whenChanged_date,RECONCILATION_FIELD:customproperty6",
"activeGroupPossibleValues": ["active","a","l","TRUE"]
}

Could you help identify this issue or any miss in the JSON configuration?

Thanks,

[sk]

@Sanjeevini : Can you provide more details like what exactly you mean by increasing by one? How exactly is that an issue,

1. Are you seeing duplicate entitlements?
2. Are you seeing more entitlements than what you expected?
3. Did you have any information about that new entitlement that is getting added after each recon?

[Sanjeevini]

1. Are you seeing duplicate entitlements?

Yes, there duplicate entitlements where one entitlement is in Active other duplicates of the same entitlement is in inactive state.

2. Are you seeing more entitlements than what you expected?

Yes, I was expecting to have same count of entitlement even if I can run the recon job continuously.

3.Did you have any information about that new entitlement that is getting added after each recon?
No

[rushikeshvartak]

RECONCILATION_FIELD is updated after import?

[Sanjeevini]

Yes, RECONCILATION_FIELD is updated for all entitlements.