Hello,
Recently one of our SCIM connectors stopped provisioning user memberships to the Target System and we think that is caused by a possible patch update or a hotfix. One month ago we were able to provision user membership normally, and withing the next month we haven't changed anything on the configurations.
We are using the table CSMUserHasGroup which handles memberships that are part of the /Users schema and this triggers the process UCI_Ucer_Update and provisions the user membership via the virtual property vrt_member (Members of M:N schema types).
Here are some logs
2025-01-20 13:51:37.3347 DEBUG (DatabaseMemberShipActionStore SCIM-<Key><T>UCIUser</T><P>83b75203-38d5-4a75-a978-54de7595e7ec</P></Key>) : Loading data...
2025-01-20 13:51:37.3347 DEBUG (DatabaseMemberShipActionStore SCIM-<Key><T>UCIUser</T><P>83b75203-38d5-4a75-a978-54de7595e7ec</P></Key>) : Loaded data:
<Key><T>UCIUser</T><P>83b75203-38d5-4a75-a978-54de7595e7ec</P></Key>:
- AddMember <Key><T>UCIGroup</T><P>c51a1220-32c1-4114-958e-b956085b3fa0</P></Key> (30B7A301-FB45-4810-BCE5-5ACBB361CB44)
- AddMember <Key><T>UCIGroup</T><P>92547a58-a8d6-4c3f-b86c-b1ff92277100</P></Key> (9BC67238-2E34-4252-9924-0E8689C95795)
<Key><T>UCIUser</T><P>83b75203-38d5-4a75-a978-54de7595e7ec</P></Key>:
- AddMember <Key><T>UCIGroup</T><P>c51a1220-32c1-4114-958e-b956085b3fa0</P></Key> (30B7A301-FB45-4810-BCE5-5ACBB361CB44)
- AddMember <Key><T>UCIGroup</T><P>92547a58-a8d6-4c3f-b86c-b1ff92277100</P></Key> (9BC67238-2E34-4252-9924-0E8689C95795)
2025-01-20 13:51:37.3347 DEBUG (ProjectorComponent b3a3dd03-9756-463c-8c93-57e7865266ef) : Actions found: 2
2025-01-20 13:51:37.3347 DEBUG (ProjectorComponent b3a3dd03-9756-463c-8c93-57e7865266ef) : Partition size for member ship handling: 2
2025-01-20 13:51:37.3347 DEBUG (ProjectorComponent b3a3dd03-9756-463c-8c93-57e7865266ef) : Entering action partition loop.
2025-01-20 13:51:37.3347 DEBUG (ProjectorComponent b3a3dd03-9756-463c-8c93-57e7865266ef) : Loop #1.
2025-01-20 13:51:37.3347 DEBUG (ProjectorComponent b3a3dd03-9756-463c-8c93-57e7865266ef) : Processing M:N property vrt_member.
2025-01-20 13:51:37.3347 DEBUG (ObjectLog 5f503134-b2de-4671-b36c-56e8e30b7cfb) : DialogTable: Getting collection, load type: Default
2025-01-20 13:51:37.3347 TRACE (SqlLog 5f503134-b2de-4671-b36c-56e8e30b7cfb) : ClaimConnectionAsync - read write, _transaction == null
2025-01-20 13:51:37.3347 TRACE (SqlLog ) : -- Connection 1 switched from Available to Working after comparison
2025-01-20 13:51:37.3347 TRACE (SqlLog ) : --> existing connection 1
2025-01-20 13:51:37.3347 DEBUG (SqlLog 5f503134-b2de-4671-b36c-56e8e30b7cfb) : (1 ms) - select TableName, UID_DialogTable, xmarkedfordeletion from DialogTable where (UID_DialogTable in (select UID_DialogTable from DPRNameSpaceHasDialogTable where IsAdHocSingleMemberShip = 1)) order by TableName
2025-01-20 13:51:38.7878 DEBUG (SystemMappingRule vrt_member_rolesvalue) : Perform mapping between rania@rabo.com ()@UCIUser[] and CN=76d3d0e4-6b96-4301-a8db-6bb98e6cd2a7,O=User,DC=gate.preproduction.eu/.../scim@User[].
2025-01-20 13:51:38.7878 TRACE (SystemMappingRule vrt_member_rolesvalue) : Options:
2025-01-20 13:51:38.7878 TRACE (SystemMappingRule vrt_member_rolesvalue) : ProjectExamples: False
2025-01-20 13:51:38.7878 TRACE (SystemMappingRule vrt_member_rolesvalue) : ProjectionDirection: ToTheRight
2025-01-20 13:51:38.7878 TRACE (SystemMappingRule vrt_member_rolesvalue) : UseOldValues: False
2025-01-20 13:51:38.8034 TRACE (SchemaElement static) : rania@rabo.com ()@UCIUser[].GetValue(UID_UCIUser) returns 83b75203-38d5-4a75-a978-54de7595e7ec
2025-01-20 13:51:38.8034 TRACE (SchemaElement static) : rania@rabo.com ()@UCIUser[].GetValue(UID_UCIUser) returns 83b75203-38d5-4a75-a978-54de7595e7ec
2025-01-20 13:51:38.8347 TRACE (SchemaElement static) : rania@rabo.com ()@UCIUser[].GetValue(vrt_member) returns <null> array
2025-01-20 13:51:38.8347 DEBUG (SystemMappingRule vrt_member_rolesvalue) : Mapping condition evaluates to false.
2025-01-20 13:51:38.8347 DEBUG (SystemConnection ConnectedSystemConnection-48F54C) : ExecuteMethod: Executing method Update object (Update) on 1 objects of type (User).
2025-01-20 13:51:38.8347 DEBUG (SystemConnection ConnectedSystemConnection-48F54C) : Options: ExceptionHandling=BreakOnError, ReloadIfRequired=True
As I mentioned earlier, we haven't changed anything on the configurations and suddenly the provisioning of user memberships stopped working. As you can see from the logs it beings handled correctly, but in the end the array returns null.
If you have faced something similar before, is it possible to help us?
Thanks in advance!
