Blog

IdentityIQ Upgrade Guidance: 8.4p3 & 8.5

Author

  • JacobGrimes

    SailPoint

In our recent IdentityIQ 8.4p3 patch & 8.5 release, we introduced an upgrade component named RoleAssignmentModelUpgrader. It was intended to address a defect where required IT roles incorrectly appeared as allowed by permitted IT roles when No Manual Assignments is disabled.

Important

We have received a few incident reports related to this upgrader in certain scenarios. Before you run the patch or GA upgrade, we recommend that you remove the RoleAssignmentModelUpgrader upgrade file from your installation package and then proceed with installation using the remaining files as usual.

What you should do

  1. If you are about to deploy IdentityIQ 8.4p3 or 8.5GA - Remove the RoleAssignmentModelUpgrader from your installation files before you start the patch or release upgrade.
  2. If you have already upgraded to 8.5GA and have concerns about the Role assignments behavior, open a support case or contact your CSM so we can assist.
  3. Downloads on Compass - When IdentityIQ 8.4p4 becomes available, 8.4p3 will be removed from the compass downloads page. Plan patch adoption accordingly.

How to remove the Upgrader file

Remove the following <ImportAction> section from the below XML files.

  • 8.4p3: WEB-INF/config/patch/identityiq-8.4p3.xml
  • 8.5: WEB-INF/config/upgrade.xml

<ImportAction name='execute'
value='sailpoint.server.upgrade.RoleAssignmentModelUpgrader'
systemVersion='8.4-108' >

<TaskDefinition name='RoleAssignmentModelUpgrader -- Identity Refresh'
executor="sailpoint.task.IdentityRefreshExecutor">
<Attributes>
<Map>
<entry key="fixPermittedRoles" value="true" />
<entry key="refreshThreads" value="5" />
</Map>
</Attributes>
<Description>TaskDefinition for the upgrader that upgrades the role assignment model. </Description>
</TaskDefinition>
</ImportAction>

For more information on 8.4p3 and 8.5, please refer to the release notes linked in each version number.

We're also here to help. Please don't hesitate to reach out to your Customer Success Manager or SailPoint Support should questions arise.