Hi Team, I need a little assistance getting over a hump in reference to AD account creation for Contractors. I am getting the error after the account is created only on Contractors. The attribute syntax specified to the directory service is invalid.\n"] I have a feeling it may be the accountexpire…

Hi Team, Thank you all for the input regarding the issue I was facing. With your input I thought it over and created a Date Format Transform and applied it to the attribute. This resulted in the correct syntax being applied for accountexpires during ad account creation for our non employees. Truly …

When you are writing the expiration date to AD are you converting the format to EPOCH_TIME_WIN32?

I don’t have a specific config that does this at the moment. Would I do this via the transform or in the source config?

Hi @mgrant , You can use transform in provisioning policies to achieve the use-case. Thanks

Hi Check below link it may help to you. Thanks [image] Setting Password Expiry Date in Active Directory ISC Discussion and Questions Hi all. We would like to set the password expiry date in the Active Directory during AD account provisioning. Our use case is as follows. …

Hi While passing account expired date to AD. SailPoint recommends that the accountExpires attribute must be defined as a string. However, the Active Directory source accepts an integer value for the accountExpires attribute in account provisioning if it is not a string. Use transform, if you want…

Hi @mgrant I would suggest to create a new identity attribute for AdAccountExpire where you will get the end date of contractors and convert it to epoch type of the date. Note: epoch i think allows max date to be till 2999 year only or something like that so in case your contractors have an end da…

One more thing to add to @vguleria and the idea of creating a new identity attribute: If you have an identity attribute that is configured with attribute sync for accountExpires, you have an easy path to update it if the contractor gets extended/returns or if the contractor converts to an employee …

accountExpires attribute in AD

Identity Security Cloud (ISC) ISC Discussion and Questions

Sivakrishna1993 (Sivakrishna Kommineni) July 14, 2024, 2:50pm 5

Check below link it may help to you. Thanks

Regards,
Siva.K

Topic		Replies	Views
AD provisioning failing with partial attributes getting populated (accountExpires) ISC Community Knowledge Base identity-security-cloud , provisioning , connectors , active-directory	1	108	July 3, 2025
Set AD AccountExpire after one year after the creation ISC Discussion and Questions transforms , identity-security-cloud , best-practices	3	213	May 27, 2025
AD accountExpires Attribute Sync Loop ISC Discussion and Questions identity-security-cloud	3	308	January 29, 2025
AD AccountExpires Create Transform +1 day ISC Discussion and Questions transforms , identity-security-cloud , provisioning	6	993	May 22, 2024
AD (Admin) source repeatedly updating AccountExpires daily for contingent workers ISC Discussion and Questions identity-security-cloud	12	431	July 9, 2024

accountExpires attribute in AD

Related topics