Symptom: Some brands deleted from the OSS database are not cleared from the IDP database. They slow down IDP startup and migration.

Diagnostic: Compare brands from the OSS and IDP databases:

  • For the IDP database:
# select substring(name, 3) as idp_brand_id from realm where name like 'sr%';
  • For the OSS database:
# select brand_id from brands; 

Resolution: Delete each orphaned brand from the IDP database:

# curl -X GET -k -E /usr/local/pem/APS/certificates/poa.pem ""   | python -m json.tool
# curl -X DELETE -k -E /usr/local/pem/APS/certificates/poa.pem "<idp_uid>/realm/<brand_id>"
Note: Brands to be deleted must not have linked accounts.