Hello everyone, I am investigating an Active Directory provisioning error through IQService and would like to understand whether anyone has encountered this scenario before or has any recommended approach. In my current flow, there is a script/rule that validates conflicts for sAMAccountName and u…

[image] Henrique Alves de Oliveira: In addition, IQService is installed on a different server than the host mapped in the Source, which may also be influencing the provisioning behavior. Can you please elaborate on this. maybe screenshots? if you check the account activity in search, you mig…

Hi @henriqueoliveira2026 It’s failing on sAMAccountName or UPN uniqueness. Your script/rule isn’t generating a unique value. Maybe share the config for those attribute values?

I implemented a before script on the Active Directory source that retrieves the sAMAccountName and validates the UPN against the Azure AD source via API, checking the upn attribute. Currently, this process is working as expected: the script updates the value when needed and returns it to SailPoint …

Hi @henriqueoliveira2026 You are using a Before Create Connector Rule, I take it? How are you using it to update the provisioning plan?

Yes, I’m using the PowerShell rule Before Create; in this case, I’m not using the provisioning plan. What I find strange is that IQService indicates a duplicate object, but there’s nothing in Active Directory, and when I remove the rule, it works normally. I’ve noticed that this only happens with …

My understanding is it’s not necessarily IQ Service generating the error, even though the message implies it. I’m not sure what you mean by not using the provisioning plan? I’m pretty confident the duplicate object error is caused by the not unique sAMAccountName name or UPN because the unique DN is…

Active Directory Provisioning Error via IQService – ENTRY_EXISTS for CN/DN, but the user does not exist in AD

Identity Security Cloud (ISC) ISC Discussion and Questions

lampard08 (Chelsea Blue) March 23, 2026, 8:37pm 2

Can you please elaborate on this. maybe screenshots?

if you check the account activity in search, you might find which attribute is causing this or IQ service logs.

also take a look at this : AD Account Creation Error - #6 by adyer

Topic		Replies	Views
Active Directory - New Account Creation Error : The object already exists ISC Discussion and Questions identity-security-cloud , provisioning , connectors	6	499	March 19, 2025
Error with Active Directory User creation IIQ Discussion and Questions identityiq , provisioning	5	1364	August 28, 2023
Active Directory account already exists // IIQ IIQ Discussion and Questions rules , identityiq , provisioning	2	627	December 21, 2023
AD Provisioning Error - Incorrect DN referenced IIQ Discussion and Questions identityiq , provisioning	3	90	January 30, 2025
Duplicate CN Handling Issue for Identities with Same Name in ISC (AD Birthright Provisioning) ISC Discussion and Questions aggregation , identity-security-cloud , provisioning , connectors , active-directory	12	124	April 13, 2026

Active Directory Provisioning Error via IQService – ENTRY_EXISTS for CN/DN, but the user does not exist in AD

Related topics