Limitation in access catalog search when intersection or custom join enabled

Initially, the access catalog search in ISIM does not support intersection and custom join for group access. There is a limitation in the search when the intersection or custom join is enabled. To make the search work correctly, we must change properties in the enRole.properties file.

If we have groups defined as access and the join directive is intersection or custom, these groups are not found in an access catalog search. To enable them, use the com.ibm.itim.accesscatalog.groupIntersectionJoin.enabled and com.ibm.itim.accesscatalog.groupCustomJoin.enabled properties defined in the enRole.properties file. Set these properties to false.

#############################################################################
## Access Catalog Properties
# com.ibm.itim.accesscatalog.groupIntersectionJoin.enabled -- This will enable
#    support to search group access when requesting access in Service Center in case that #    Intersection Join director is used for the group attribute. Default = false
# com.ibm.itim.accesscatalog.customJoin.enabled -- This will enable support to #    search group access when requesting access in Service Center in case that #    Custom Join director is used for the group attribute.  Default = false
#############################################################################
com.ibm.itim.accesscatalog.groupIntersectionJoin.enabled=false
com.ibm.itim.accesscatalog.groupCustomJoin.enabled=false

See Access catalog propertiesParent topic: Troubleshooting ISIM Server problems