New Account created when a role is assigned to a user with existing account in inactive state

[SUMAIYA_BABU]

We have a user U who is active, but has an account A that is inactive. When we try to assign an enterprise role R to the user, which has entitlements from the same endpoint as account A through any of the methods,

ARS -Request Enterprise Role 

Through Birthright Rule

Saviynt creates a new account A2 and assigns the entitlements from the role instead of just skipping the adding entitlement to the account because because account is existing in inactive state.

We are using a REST connector for the application.

[rushikeshvartak]

• Did you configured account name for application ?
• Does account is mapped to user ?

[SUMAIYA_BABU]

@rushikeshvartak yes, we have an accountname rule in the endpoint and the account is mapped to the user.

[rushikeshvartak]

• what is username of user and account name 
• what is account name rule configured?

[SUMAIYA_BABU]

@rushikeshvartak This is not specific to one user, it happens across all users and all accounts.

We have the below accountnamerule

[rushikeshvartak]

Below option is enabled for endpoint ?

Disable New Account Request if Account Already Exists

[SUMAIYA_BABU]

Yes. Thats enabled

[rushikeshvartak]

Can you share logs

[amullapudi]

Hello,

Just want to be clear on the issue, Are you expecting a new account "A2" shouldn't be created or entitlements already part of inactive account "A1" should not be added to new account "A2"?