Viewing and remediating conflicting account attributes

View and remediate conflicting account attributes.

Before you begin

You must complete an account synchronization process.

About this task

The conflicting attributes for compliant accounts are automatically resolved. If a remediation policy is not set for the application, you can manually resolve conflicting attributes for non-compliant accounts. You can also manually assign owners to unmatched accounts on an individual basis.

Procedure

Select Applications > Applications.
Select the application.
Select the icon and select Accounts or select the accounts icon from the application summary pop-out.
Optional: Use the search field to search by an account user name.
Optional: Select Filters to filter the accounts.
You can filter by:
Account status
Filter selections are
- Active
- Disabled
- Not provisioned
- Suspended
- Provisioning
- Deprovisioning
- Suspending
- Restoring
Compliance status
Filter selections are
- Compliant
- Non-compliant
- Unmatched
- Orphaned
- Unmanaged
- Failed
You can use any combination of filters to refine your results. Select Apply filters to modify the report. The selected filters are displayed above the table. You can clear the filters by selecting the Reset link.
From the user account list, select the checkbox of the non-compliant user account that you want to remediate. You can select the multiple user accounts.
Select Remediate, it is displayed at the top right corner of user account list.
The Remediation options pop-up window is displayed.
Select how you want to remediate the conflicts.
- For non-compliant accounts, you can select the following actions:
  
  Update Verify with the target application's values
  
  This option indicates that the account attribute values from Verify overwrite the target values.
  Note: To use this option on a particular target attribute, ensure that in the Account life cycle section of application details, the Keep value updated checkbox for that particular attribute is selected. Doing so ensures that the target account attributes are always updated with the remediated value from Verify.
  Note: If you choose this option and the reverse attribute mapping is not set, you will get a alert message. It contains link to the application details section, you can set up reverse attribute mapping from the Account sync tab. See, Setting account synchronization for the application.
  
  Update target application with Verify values
  
  This option indicates that account attribute values from target overwrite the Verify values.
  
  Mark as "unmatched"
  
  If an account is assigned to a wrong owner, use this option. You can remediate the unmatched account by manually assigning a new owner.
- For unmatched accounts, select Assign an owner. Type the name in the Find user field. Select the user from the results. If you selected the wrong user, click Change user to return to the Find user field.
Note: If the remediation policy is 'Do not remediate non-compliant accounts automatically', the account is adopted only, and no remediation is done.
Select Remediate accounts.