v2021.0 Error occurred while calculating SoD - ARS Request Submission

[rushikeshvartak]

We are not able to submit request in v2021 for particular application

Error : 

Error Evaluating in SOD

Note :

we are not using SOD for any application in environment. on Developer logs it shows its passing sodcheck=true 

1. No Ruleset in Saviynt

2. externalconfig.properties does not have sod.endpoints entry for particular application

3. all global config related to sod are disabled.

Additional details -

if user dont have any application access then it works accurately but if user have some application it fails

[ksadhashiva]

Hello,

We are facing similar issue in v2020.x , user with only end user SAV role cannot submit request to any application.

[Nikitaj]

Hi @rushikeshvartak 

Could you please set "sod.endpoints=dummy" in external config and also can disable "SHOW SOD IN Request" from SAV Role and confirm.

[rushikeshvartak]

@Nikitaj Both configuration are already in place & requestor having ROLE_ADMIN sav role.

[Nikitaj]

Hi @rushikeshvartak ,

Thanks for confirming!

Could you please run below query and find all the duplicate entitlements if any - 

select entitlementtypekey, entitlement_value, count(entitlement_value) as count from entitlement_values group by ENTITLEMENTTYPEKEY,ENTITLEMENT_VALUE having count > 1;

As If there are duplicate entitlements, projects, project roles are also getting duplicated in Saviynt and resulting in "Error while calculating SOD" even though there are no SOD rulesets configured.

Please check and confirm.

[rushikeshvartak]

There are no duplicate entitlement for application

[Nikitaj]

Hi @rushikeshvartak 

Could you please share the logs for this,  it might be an issue with the API permissions.

[Nikitaj]

Hi @rushikeshvartak 

Could you please share the logs as well as snip of your web service API from SAV Roles.

[rushikeshvartak]

@Nikitaj  Please find attached logs & this is happening for disconnected apps

[Nikitaj]

Hi @rushikeshvartak 

Thanks for sharing the  logs and other information!

Could you also please share "arsms" logs, to look for the API call.

[BrandonLucas_BF]

 We have this exact issue with an open support request. v2020.1

What is the resolution?

[rushikeshvartak · Accepted solution]

• Remove Application name from externalconfig.properties
• Make sure your externalconfig.properties have all endpoints name which are valid & exists in system for variable sod.endpoints

[BrandonLucas_BF]

If you are referring to ensuring that sod.endpoints only lists the endpoints where SOD should apply, unfortunately removing these did not work for us.

Even setting this to sod.endpoints=dummy does not make the error go away.