Error with provisioning role and public task in IDS 14.3

[Julian Riano]

Hello community

I have a provisioning role that all users must win, this provisioning role creates a user in an ou of CA Directory, the problem is that the users who register themselves get this provisioning role but are not created in the ou until the user In the Access Rights module, it requests permission to belong to a group, at the moment the application is approved, it is created in the OU and becomes a member of the group.

If the user is created by another user this wins the provisioning role and is created immediately in the ou

I have verified the account template and everything is correct

Is this because self-registration is a public task? What can I do to work correctly?

------------------------------
Julian Riaño
MSL
------------------------------

[Catherine Sullivan]

Is Account Synchronization enabled on the self-registration task?  And how are you assigning the Provisioning Role?  You can compare the account sync settings on both tasks.

[Julian Riano]

Hi Catherine, thanks by your answer

I have reviewed the tasks and apparently is correctly defined, then 2 images with the information of each task

This task sinchronice the Account template correctly

This task synchronize the Account template incorrectly until additional provisioning role are request and aprove

The following is the policy that assign the Provisioning role according to the value of user attributes

Any idea about why in the self-registration public task does not perform syncronization automatically?