Uploaded image for project: 'OpenIDM'
  1. OpenIDM
  2. OPENIDM-15255

A user removed from AD groups doesn't get reassigned to default Salesforce profile


    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Not a defect
    • Affects Version/s: 7.0.0
    • Fix Version/s: None
    • Labels:
    • Environment:
      7.0.0-SNAPSHOT of 31-Jul-2020 21:18, rev# 342517f


      This is with the "AD Group to Profile: Advanced Settings" > "When to update" set to "When creating and updating a user" and the default profile ("If value is null apply default value") set to "Identity User".

      I created a user in AD - icUser01 - and added it to 2 AD groups - ProfileGroup1 & ProfileGroup2. After I started up IC, I mapped ProfileGroup1 to "Chatter Moderator User" and ProfileGroup2 to the lower priority "Inside Sales". After a full recon, icUser01 was created in Salesforce and assigned to the higher priority "Chatter Moderator User" profile, as expected. (This is part of the check_profile_mapping_with_update_when_creating_and_updating test.)

      I then updated icUser01 by removing it from all AD groups (other than users). After a full recon, I expected the updated icUser01 to get reassigned to the default Salesforce "Identity User" profile, but it wasn't. It was still assigned to "Chatter Moderator User".




            • Assignee:
              alin Alin Brici
              GErickson Garyl Erickson
              QA Assignee:
              Garyl Erickson
            • Votes:
              0 Vote for this issue
              2 Start watching this issue


              • Created: