Simultaneous multiple provisioning requests can cause racing conditions. If two
concurrent threads try to provision the same account, one thread succeeds, the other thread fails.
The enrole attribute account.provision.concurrency.resolution
was added at Fix Pack 4 to resolve racing conditions. If the subsequent provisioning
requests are failing because the account exists, you can take corrective actions.
Before you begin
This issue has been fixed in version 6.0.0.4. Only earlier versions need this workaround.
Depending on how your system administrator customized your system, you might not
have access to this task. To obtain access to this task or to have someone complete it for you,
contact your system administrator.Only individuals who are part of the administrator group can
access this feature.
Ensure that Fix Pack 4 is installed. Check the schema to verify that the
account.provision.concurrency.resolution is set to the default value of 0. See
Concurrency
properties.
About this task
If Fix Pack 4 is correctly installed, you might need to increase the lock time for the
concurrency attribute.
Procedure
- Log on to the IBM Verify Identity Governance administration
console.
- Add the erconcurrencytimeout field to the service form.
- From the navigation tree, click .
The form designer applet is displayed.
- In the left pane, double-click the Service folder to display
the profiles for the service types. Double-click the service type profile to open the template for
that profile.
The form template that is associated with the service type profile is
displayed in the middle pane.
- Select the tab to which you want to add the attribute.
- In the Attribute List pane, double-click
erconcurrencytimeout.
The attribute is added to the form.
- Right click erconcurrencytimeout. Click Move Up
Attribute or Move Down Attribute to position the field on the
form.
- Click , and then click OK when a message is
displayed, indicating that the form template is saved successfully.
- Click Close to exit Form Designer.
- Increase the timeout setting for the erconcurrencytimeout
setting.
- From the navigation tree, click Manage Services.
- Click Search.
- Select the service that you want to modify and click
Change.
- On the Service page, scroll to the
erconcurrencytimeout field and enter a timeout value in
minutes.
The default setting is 15 minutes.
- Click OK.
- Click Close.
What to do next
Try your provisioning requests again. If the requests still fail, try increasing the
erconcurrencytimeout by a greater amount. If the failures persist, check
IBM Electronic Support for additional information at http://www.ibm.com/support/entry/portal/product/security_systems.