Unable to Raise a "New Request" for any of the existing application

[jbaskaran]

HI, I tried to raise a new Request under 'Request New Access/Manage My Access/Request Access for Others'  but I am unable to raise a request for any of the existing application. It says "New account request is disabled". Note : SAV Role is assigned "Role_ADMIN". Please find below screenshot for the same.

Could anyone of you please have a check and help in fixing the same. 

Thank you

Regards

Jbaskaran

[sahajranajee]

Hello,

This is an endpoint level configuration for this 'Disable New Account Request if Account Already Exists' . Please see if that is enabled for you. It should be off as below to allow you to request another account on the same endpoint.

If its ON, please update it and then click update on the Endpoint Details page. then run the full sync job. And wait for 5-10 minutes for changes to sync.

[jbaskaran]

Hi Sahaj, 

Thank you for your update.

Yes correct the option 'Disable New Account Request if Account Already Exists' was Enabled and I changed it. Also executed the Microservice Jobs for couple of times and waited for more than half an hour but no luck. Issue still exist

Regards

Jayashree

[rushikeshvartak]

1. Does any tasks are open for user ?
2. Does any dependent Endpoint Tasks open for user ?
3. Does inflight mode enabled for endpoint?
4. Does any request in ars_requests for user with open status which is not visible on UI (due to wf issue)

[jbaskaran]

HI Rushi,

Please find my inline response below:

1. Does any tasks are open for user ? - No
2. Does any dependent Endpoint Tasks open for user ? - No
3. Does inflight mode enabled for endpoint? - No
4. Does any request in ars_requests for user with open status which is not visible on UI (due to wf issue) - No

Note : Its a fresh instance this is the first new request we are trying to raise it

Regards

Jayashree

[sahajranajee]

Hello,

I hope you hit the update endpoint button as well after making this change :

after doing this, execute the sync job. 
also clear your server cache, follow the instructions i provided in another post :

https://forums.saviynt.com/t5/identity-governance/changes-to-an-endpoint-s-dynamic-attributes-are-no...

[jbaskaran]

Hi Sahaj,

Thank you for your update.

Yes, I hit the update button after the change & then executed the jobs.

I will try to clear the server cache as well.

Regards,

Jayashree

[jbaskaran]

HI Sahaj,

Tried, cleaning the server cache as well still issue exist.

Note : We are using version V2021.0

Regards

Jayashree

[avinashchhetri]

Jayashree,

Based on the inputs provided by the folks in here, all of which are legitimate, and what you have tried, I'd suggest you validate if the changes you are making at the endpoint level are getting synchronized or not. You can change the setting on one of the working requestable endpoint as non requestable, try the methods you have used to sync the endpoints before and validate if the changes are actually taking effect.

Regards,

Avinash Chhetri

[jbaskaran]

Hi Avinash,

Thank you for your update.

Yes, you are correct. Changes are not getting reflected even after running the microservices job.

What is that we could do now ?

Regards

Jayashree

[rushikeshvartak]

Run query from data analyzer if change are updated. 

select * from endpoints

[jbaskaran]

Hi Rushi,

Thank you for your update.

When I checked in Data Analyzer by running the shared query. 

I could see that it is updated as per the change still issue exist.

Regards

Jayashree

[sahajranajee · Accepted solution]

Hello,

Could you check if you are able to request an account at all?
There is a setting in Global Configuration : "Allow Request Without Manager" and ensure its set to Enabled.

If not, please do it and run the apis to clear server cache and try again.

[jbaskaran]

Hi Sahaj,

Thank you so much, after doing the above changes now "Request New Account" is Enabled. 

So for my better understanding the above solution worked because the user who was trying to make a new request wasn't mapped with any Manager so it was stopping from raising a new request. Is that correct ?

But still whatever changes made in endpoint level is not getting reflected, like in one of the suggestion I was asked to make the endpoint as non-requestable but its still available. Any suggestion ?

Regards

Jayashree 

[sahajranajee]

Hi Jayashree,

Yes your understanding is correct. Ideally, even the other changes should also work now. If its not, it makes sense to check the sync job logs as well.

[jbaskaran]

Hi Sahaj,

Thank you for your confirmation.

Other changes are still not reflecting, might be I can revisit on the sync job logs.

Also tried to create a new job for the same and executed but no luck issue still persist.

Regards

Jayashree

[jbaskaran]

Hi, 

I tried checking the logs but no error found.

Also tried creating a new job for the same and executed still the same. 

Addition to this when New request is raised, No request details are visible in Request History tile or Request #.

Note: I checked in Data Analyzer, data updated but not shown in UI.

Request you to please help in fixing the same. 

Thank you

Regards

Jayashree