I am using IGL 7.1 P02. I had setup ldap based Entitlement collection in which we have multi valued attributes. So, collector is collecting the first value only and rejecting the rest of the values. As per the 000035906 - RSA Identify Governance and Lifecycle WorkDay Identity Collector "unexpected element " error , it has been resolved in 7.0.2 P06 or later. Is there any resolution for this yet?
This document you are referencing is specific to the WorkDay collector, not AD/LDAP collectors. I would suggest you submit this to RSA Ideas for RSA Identity Governance & Lifecycle to officially request this feature.
May I also ask how your data and collector look like?
Attribute value which is multivalued (mdtAdminRoles) has role/roles for users alligned in a row in LDAP. collector just collects the first value and rejects the other values separated in commas.LDAP does have multi values so why the connection type of LDAP is provided in IGL without adding its functionality? We do have csv based collector already in existience but we rae planning to remove the csv collections and setup direct collection instead.
So if I understand correctly, you have a multi-valued attribute populated on the Account level that holds a list of roles that account has?
If so, I just tested in-lab to populate such an attribute on AD then use an Active Directory EDC to collect that attribute using the option "Collect attribute value as application role” and it worked without any errors/rejections. The collector gets the full list of values in the attribute and assigns each as a separate App-Role to the account. Can you show me the collector configuration and the raw data with errors from your trials?
The error message says "Unique Identitifier for Group: xxxxx contains duplicate value. Value: MDT Account Admin”.
I think I'm a bit confused here, why are you collecting Groups? I though this was a multi-valued attribute on the account level, no groups involved.