{"id":421,"date":"2017-09-11T14:13:09","date_gmt":"2017-09-11T09:43:09","guid":{"rendered":"http:\/\/www.enhisecure.com\/isecureblog\/?p=421"},"modified":"2019-05-21T13:55:49","modified_gmt":"2019-05-21T09:25:49","slug":"resolved-manage-account-request-problem-in-sailpoint-iiq","status":"publish","type":"post","link":"https:\/\/www.enhisecure.com\/isecureblog\/2017\/09\/11\/resolved-manage-account-request-problem-in-sailpoint-iiq\/","title":{"rendered":"Resolved : Manage Account Request Problem in SailPoint IIQ"},"content":{"rendered":"<p><strong>Environment:<\/strong><\/p>\n<p><a href=\"https:\/\/www.sailpoint.com\/\">SailPoint <\/a>Version : 7.0, 7.1<\/p>\n<p><strong>Problem Statement:<\/strong><\/p>\n<p>Unable to request a new account for existing identity from Manage Accounts in <a href=\"https:\/\/www.sailpoint.com\/identity-management-software-identityiq\/\">SailPoint IIQ<\/a>.<\/p>\n<div id=\"attachment_466\" style=\"width: 1122px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-466\" class=\"size-full wp-image-466\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestAccountProblem_enhisecure.jpg\" alt=\"\" width=\"1112\" height=\"255\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestAccountProblem_enhisecure.jpg 1112w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestAccountProblem_enhisecure-300x69.jpg 300w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestAccountProblem_enhisecure-1024x235.jpg 1024w\" sizes=\"auto, (max-width: 1112px) 100vw, 1112px\" \/><p id=\"caption-attachment-466\" class=\"wp-caption-text\">Problem : Account Request Option is not available<\/p><\/div>\n<p>&nbsp;<\/p>\n<p><strong>Solution<\/strong>\u00a0:<\/p>\n<p>Firstly we need to check the Lifecycle Manager Configurations,\u00a0<span style=\"text-decoration: underline\">navigate to Lifecycle Manager and in Configure tab Search for Manage Accounts options<\/span> :<\/p>\n<p><strong>Applications that support account only requests :\u00a0<\/strong>Select a<span style=\"text-decoration: underline\">ll applications<\/span> check box or specified application according to your requirement.<\/p>\n<div id=\"attachment_458\" style=\"width: 561px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-458\" class=\"size-full wp-image-458\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/solution-part-1.png\" alt=\"\" width=\"551\" height=\"405\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/solution-part-1.png 551w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/solution-part-1-300x221.png 300w\" sizes=\"auto, (max-width: 551px) 100vw, 551px\" \/><p id=\"caption-attachment-458\" class=\"wp-caption-text\">Solution part 1-\u00a0Select all applications<\/p><\/div>\n<p>&nbsp;<\/p>\n<p>Allow Manage Accounts Additional Account Requests :\u00a0<strong>Enable<\/strong><br \/>\nAllow Manage Existing Accounts :\u00a0<strong>Enable<\/strong><br \/>\nAllow Account Only Requests :\u00a0<strong>Enable<\/strong><\/p>\n<p>&#8211;&gt; If you are using <strong>higher version of SailPoint 6.4<\/strong> then you will face problem in finding these 3 options to enable them.<\/p>\n<p><span style=\"text-decoration: underline\"><strong>Solution 1 :<\/strong><\/span><\/p>\n<p>For that you need to edit init-lcm.xml and import it again in iiq console. (This will <strong>effect pre-existing workflows and LCM Configuration<\/strong>. So, to avoid that follow <strong>Solution 2)<\/strong>.<\/p>\n<p>Follow these steps and pictures shown below for editing init-lcm.xml (Solution 1)<\/p>\n<p><strong>\u00a0<\/strong><strong>Step 1: init-lcm.xml\u00a0<\/strong>is present in ~identityIQ\/WEB-INF\/config\/init-lcm.xml location. Make a copy of it and place it in a safe folder.<\/p>\n<p>&nbsp;<\/p>\n<p>Now open init.xml and search for Manage Accounts under QuickLink tag.<\/p>\n<div id=\"attachment_461\" style=\"width: 1201px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-461\" class=\"wp-image-461 size-full\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/ManageAccountTagIn_init-xml.jpg\" alt=\"\" width=\"1191\" height=\"53\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/ManageAccountTagIn_init-xml.jpg 1191w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/ManageAccountTagIn_init-xml-300x13.jpg 300w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/ManageAccountTagIn_init-xml-1024x46.jpg 1024w\" sizes=\"auto, (max-width: 1191px) 100vw, 1191px\" \/><p id=\"caption-attachment-461\" class=\"wp-caption-text\">In init.xml search Manage Account<\/p><\/div>\n<p>&nbsp;<\/p>\n<p>Carefully observe 3 entries under Manage Accounts tag.<\/p>\n<div id=\"attachment_468\" style=\"width: 653px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-468\" class=\"size-full wp-image-468\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/Original_init-xml_enhisecure.jpg\" alt=\"\" width=\"643\" height=\"583\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/Original_init-xml_enhisecure.jpg 643w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/Original_init-xml_enhisecure-300x272.jpg 300w\" sizes=\"auto, (max-width: 643px) 100vw, 643px\" \/><p id=\"caption-attachment-468\" class=\"wp-caption-text\">Original_init-lcm.xml of SailPoint 7.1 version<\/p><\/div>\n<p><strong>\u00a0<\/strong><\/p>\n<p><strong>Step 2:<\/strong> Make few changes by enabling this options manually from <strong>false to true<\/strong>\u00a03 times in Quicklink Manage Accounts tag as shown in the picture below.<\/p>\n<p style=\"text-align: center\"><em>&lt;entry key=&#8221;allowManageAccountsAdditionalAccountRequests&#8221; value=&#8221;false&#8221; \/&gt;<\/em><br \/>\n<em> &lt;entry key=&#8221;allowManageExistingAccounts&#8221; value=&#8221;true&#8221; \/&gt;<\/em><br \/>\n<em> &lt;entry key=&#8221;allowAccountOnlyRequests&#8221; value=&#8221;false&#8221; \/&gt;<\/em><\/p>\n<p style=\"text-align: center\"><span style=\"text-decoration: underline\"><strong>After editing :<\/strong><\/span>\u00a0<em>&lt;entry key=&#8221;allowManageAccountsAdditionalAccountRequests&#8221; value=&#8221;<strong>true<\/strong>&#8221; \/&gt;<\/em><br \/>\n<em> &lt;entry key=&#8221;allowManageExistingAccounts&#8221; value=&#8221;<strong>true<\/strong>&#8221; \/&gt;<\/em><br \/>\n<em> &lt;entry key=&#8221;allowAccountOnlyRequests&#8221; value=&#8221;<strong>true<\/strong>&#8221; \/&gt;<\/em><\/p>\n<p>&nbsp;<\/p>\n<div id=\"attachment_463\" style=\"width: 610px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-463\" class=\"wp-image-463 size-full\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/custom_init-lcm.jpg\" alt=\"\" width=\"600\" height=\"557\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/custom_init-lcm.jpg 600w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/custom_init-lcm-300x279.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><p id=\"caption-attachment-463\" class=\"wp-caption-text\">After Editing Manage Accounts Configuration<\/p><\/div>\n<p>&nbsp;<\/p>\n<p><strong>Step 3:\u00a0<\/strong>Now save it and import it in iiq console. By using command <em><strong>import init-lcm.xml<\/strong><\/em>. After importing observe following changes.<\/p>\n<p><strong>Step 4:\u00a0<\/strong>Request Account option is available <strong>(Issue Resolved)<\/strong>. Choose the application for account request. <strong>Submit<\/strong> the form.<\/p>\n<p>&nbsp;<\/p>\n<div id=\"attachment_459\" style=\"width: 650px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-459\" class=\"size-full wp-image-459\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailable_enhisecure.jpg\" alt=\"\" width=\"640\" height=\"396\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailable_enhisecure.jpg 640w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailable_enhisecure-300x186.jpg 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><p id=\"caption-attachment-459\" class=\"wp-caption-text\">Request Option Available Now 7.1<\/p><\/div>\n<blockquote>\n<p style=\"padding-left: 90px\">&gt; Just for Reference in SailPoint 7.0 \u00a0it will look like this as shown in the picture below.<\/p>\n<\/blockquote>\n<div id=\"attachment_465\" style=\"width: 655px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-465\" class=\"wp-image-465 size-full\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailableinsp7_enhisecure.jpg\" alt=\"\" width=\"645\" height=\"540\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailableinsp7_enhisecure.jpg 645w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/RequestOptionAvailableinsp7_enhisecure-300x251.jpg 300w\" sizes=\"auto, (max-width: 645px) 100vw, 645px\" \/><p id=\"caption-attachment-465\" class=\"wp-caption-text\">Request Option Available in SailPoint 7.0<\/p><\/div>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Step 5: <\/strong>Confirm Account Action . Click<strong> Confirm <\/strong>at the end of the page.<\/p>\n<div id=\"attachment_464\" style=\"width: 1113px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-464\" class=\"size-full wp-image-464\" src=\"http:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/confirm_account_request.jpg\" alt=\"\" width=\"1103\" height=\"476\" srcset=\"https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/confirm_account_request.jpg 1103w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/confirm_account_request-300x129.jpg 300w, https:\/\/www.enhisecure.com\/isecureblog\/wp-content\/uploads\/2017\/09\/confirm_account_request-1024x442.jpg 1024w\" sizes=\"auto, (max-width: 1103px) 100vw, 1103px\" \/><p id=\"caption-attachment-464\" class=\"wp-caption-text\">Confirm Account Request<\/p><\/div>\n<p>&nbsp;<\/p>\n<p><span style=\"text-decoration: underline\"><strong>Solution 2<\/strong><\/span><strong> :<\/strong><\/p>\n<p>You can get same results by configuring through <em><strong>Debug Pages.<\/strong><\/em><\/p>\n<p><strong>Step 1: <\/strong>Go to Debug Page &gt; Select object <em>QuickLink <\/em>from dropdown list<em>.\u00a0<\/em>Choose <strong>Manage Accounts<\/strong>.<\/p>\n<p><strong>Step 2:\u00a0<\/strong>Follow same Step 2 in Solution 1.<\/p>\n<p><strong>Step 3:<\/strong>\u00a0Request Account option is available <strong>(Issue Resolved).<\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Environment: SailPoint Version : 7.0, 7.1 Problem Statement: Unable to request a new account for existing identity from Manage Accounts in SailPoint IIQ. &nbsp; Solution\u00a0: Firstly we need to check the Lifecycle Manager Configurations,\u00a0navigate to Lifecycle Manager and in Configure tab Search for Manage Accounts options : Applications that support account only requests :\u00a0Select all [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[9,8,14,16],"tags":[10,29,11],"class_list":["post-421","post","type-post","status-publish","format-image","hentry","category-cyber-security","category-identity-governance","category-sailpoint","category-technology","tag-identity-iq","tag-iiq","tag-sailpoint","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/posts\/421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/comments?post=421"}],"version-history":[{"count":25,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/posts\/421\/revisions"}],"predecessor-version":[{"id":498,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/posts\/421\/revisions\/498"}],"wp:attachment":[{"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/media?parent=421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/categories?post=421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.enhisecure.com\/isecureblog\/wp-json\/wp\/v2\/tags?post=421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}