Active Directory Test Connection Failed

SailPoint Human Fabric (SHF) SHF Discussion and Questions
1

Hello All,

We are getting this error when testing connection on Active Directory source. This is intermittent. It passes and then fails intermittently.

Any pointers would be appreciated.

image
image595×319 19.4 KB

Thanks,

Maninder K

2

Hello @maninderkauriamc,

Since this is intermittent, I would first look at this as a health-check/communication timeout rather than an authentication failure. SailPoint documents healthCheckTimeout specifically for Test Connection and health checks, and the default is 30 seconds. SailPoint recommends increasing it in 15-second increments if the operation is timing out. The ~31-second timing in your error lines up closely with that default. [documentat…lpoint.com], [documentat…lpoint.com]

Before only increasing the timeout, though, I would check why the response is intermittently taking more than 30 seconds:

  • Check the VA/CCG logs around the exact timestamp of the failed Test Connection.
  • Verify connectivity and DNS resolution from the VA to each configured Domain Controller.
  • If multiple DCs are configured, test each one individually. SailPoint tries the next configured DC if connection to the first one fails, so an intermittently unavailable/slow DC could contribute to inconsistent results. [documentat…lpoint.com]
  • Check firewall/network latency and LDAP/LDAPS connectivity between the VA and AD.
  • If IQService is involved in the failing operation, also verify that the IQService Windows service is running, connectivity to the configured IQService port is stable, and TLS configuration is correct. SailPoint documents IQService configuration and TLS requirements here. [documentat…lpoint.com]
  • As a test, you can increase healthCheckTimeout, for example from 30 to 45 seconds.

You can refer some similar discussions below ;

3

This looks mostly like a VA connectivity issue. Since the test connection is intermittently passing and failing, I would suggest checking the VA health/status and connectivity between the VA and the Active Directory servers.

Restart the VA cluster from UI and re try.

4

@maninderkauriamc check your firewall or run this command from your va nc -zv port number .if it success it should work via sailpoint

5

As per your screenshot, I can see that the Virtual Appliance (VA) is attempting to connect to the IQService or Domain Controller (DC), but it is not receiving a response. Could you please verify the connectivity between the VA and IQService, as well as between the VA and the Domain Controller? Sometimes this issue occurs when the required ports are not open or are being blocked by a firewall.

nc -zv