Attestation Deny decision does not remove the membership from employee OIDM - 8.1.3

Hi,

I created a custom Attestation policy from the copy of the System entitlement memberships attestation. I triggered the Attestation policy on an employee.

I selected Deny as the decision. However, It's not removing the groups from employees.

UNSAccountInUNSGroup table is defined in the attestation procedure. 

I have checked through the Configuration parameters - QER\Attestation\AutoRemovalScope\UNSGroupInUNSGroup\RemoveDirect is enabled.

May I know where else I need to check, in order for the membership to be removed from the employee after they deny the attestation?

Thanks

Parents Reply Children