I am getting error while creating AD (and MS exchange ) accounts. It seems that it tries to modify account which is not created yet. error: Account created but failed to modify : Failed to update attributes for identity CN=1000000,OU=Users,OU=People,DC=activedir,DC=xu,DC=com. The specified directo…

2 / 2 I would begin by inspecting the account request to identify attribute values that are either invalid or prohibited, including a thorough examination of attributes like “samaccountname,” etc

Can it be something related to my actions, I trying to create and delete the same account. I have tried to remove almost all additional attributes but it seems even basic attribute like givenName and sn is forbidden to commit. [image] currentError: Account created but failed to modify : Failed …

Hi @kskendelis Could you check Provisioning Transactions of these operations? Are you check IQservice logs? It would be possible provide these logs? Thanks!

Logs have been added. IQ_AD.log (47.5 KB)

Problem was some additional attributes while creating new account. I have tested creation one by one and removed those which failed. Now account created without any errors or exceptions .

@Jarin_James same error I am getting during account creation. In my case I checked all attributes mentioned in provisioning policy exist in AD, still I am getting same error is there any other reason to get this error

can you share your request or plan?

Can you enable logging on the IQService on server neptunas-app ? This log-file should contain the name of the failing attribute. (My best guess would be IIQDisabled, but look at the iqtrace.log file) For provisioning to AD over IQService, the IQService logging will provide more and better details…

Hi @2135797 , Please create a new post by providing all the required information. This will help us to understand and track the issue better. As @Remold suggested please share the logs as well to further analyze the issue.

AD: Account created but failed to modify

IdentityIQ (IIQ) IIQ Discussion and Questions

Jarin_James (Jarin James) September 13, 2023, 2:10pm 2

Hi @kskendelis ,

Verify all the attributes present in the Provisioning Policy is added to the account or not. The issue seems like is because the attribute mentioned in the Provisioning Policy doesn’t exist in AD.

Topic		Replies	Views
AD Account Creation and Update ISC Discussion and Questions provisioning	5	1682	August 7, 2023
Account Creation Success but Attribute Update Failure in AD: "The attribute syntax specified to the directory service is invalid" IIQ Discussion and Questions identityiq , provisioning , active-directory	10	316	September 21, 2025
AD: Account created but some attributes are not updated properly ISC Discussion and Questions identity-security-cloud , provisioning	4	1743	January 15, 2024
AD account is created but attributes are not updated properly ISC Discussion and Questions identity-security-cloud , provisioning	16	292	June 7, 2025
AD provisioning fail IIQ Discussion and Questions identityiq , provisioning	14	664	June 30, 2024

AD: Account created but failed to modify

Related topics