Dears,
We're using multiple accounts per identity from same AD for different purpose - a-accounts for regular application access and t-accounts - for testing purposes (avoiding approval phase). There are only few t-accounts, and these are assigned to application admins, and the reason we have these accounts is to allow them to switch between application roles without approvals.
BUT. There's one issue we're trying to find a workaround for.
Lets say there's application with A, B, C entitlements. User has already A and B entitlements assigned to his a-account. Now, he also has t-account and he wants to test B entitlement on it. But in request form he will only see C entitlement, because A and B already assigned to his other account.
Is it possible to allow to have same entitlements for different accounts per identity?
Would appreciate any help or suggestions.
Regards
Andrew Drobenko
Hi Nofal,
Sorry for the delay with response. Yes, you are correct - looks like if you're using Global form (which is selected by default when creating new form) it first checks if identity already has this entitlement, so in case you have two accounts and A and B already assigned to one account, you won't be able to request same entitlements for the other account.
Thanks to RSA guys i have already found a workaround and implemented proper request form - the trick was to use Directory form type instead of Global - that will check if account has requested entitlement (not identity) , so you can request same entitlements for both of account for the same identity.
Thanks everyone
Andrew