# AD account creation from INow

**URL:** <https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479>\
**Category:** SHF Discussion and Questions\
**Created:** [March 21, 2022, 2:42pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479 "2022-03-21T14:42:12Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandracmmohan27](https://avatars.discourse-cdn.com/v4/letter/c/ce7236/32.png) [@chandracmmohan27](https://developer.sailpoint.com/discuss/u/chandracmmohan27)\
**Post date:** [March 21, 2022, 2:42pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/1 "2022-03-21T14:42:12Z")

</div>

Hi experts,

I’m trying to create the AD accounts from INow, But I’m not sure about steps to follow, could someone please help me with steps or article to follow to progress this task.

---

<div class="post-metadata">

**Author:** ![briane\_bullock](https://avatars.discourse-cdn.com/v4/letter/b/41988e/32.png) [@briane\_bullock](https://developer.sailpoint.com/discuss/u/briane_bullock)\
**Post date:** [March 21, 2022, 9:16pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/2 "2022-03-21T21:16:43Z")

</div>

To create AD accounts from IdentityNow you’ll need to create a role. The role should have associated with it at least one access profile containing at least one AD group (use Domain Users if you just want to create an “empty” AD account with no additional groups). Provision this role to your user(s) and an AD account will be created automatically for any users that do not already have an AD account correlated to their identity.

---

<div class="post-metadata">

**Author:** ![chandracmmohan27](https://avatars.discourse-cdn.com/v4/letter/c/ce7236/32.png) [@chandracmmohan27](https://developer.sailpoint.com/discuss/u/chandracmmohan27)\
**Post date:** [March 22, 2022, 2:41pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/3 "2022-03-22T14:41:53Z")

</div>

@briane_bullock

Thanks for your reply.

I tried this process, I have granted the identity with ER (that contains AD entitlement). Also the AD source provisioning page is set up only with the attributes (DN, sAMAccountName, Display name). But still it is throwing me the error message (attached) howerver the error message is not giving enough details to check on which transform the problem is with.

![image](https://global.discourse-cdn.com/sailpoint/original/1X/ea6349cdc1fb4998acc85061c6860e185c7c1c8a.png)

---

<div class="post-metadata">

**Author:** ![krigney](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krigney/32/772_2.png) [@krigney](https://developer.sailpoint.com/discuss/u/krigney)\
**Post date:** [March 22, 2022, 8:02pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/4 "2022-03-22T20:02:51Z")

</div>

Do the attributes you are creating in AD exist in the cube of a user? If they do make sure they are mapped correctly

---

<div class="post-metadata">

**Author:** ![briane\_bullock](https://avatars.discourse-cdn.com/v4/letter/b/41988e/32.png) [@briane\_bullock](https://developer.sailpoint.com/discuss/u/briane_bullock)\
**Post date:** [March 22, 2022, 9:56pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/5 "2022-03-22T21:56:29Z")

</div>

Check the provisioning policy. My guess is that there is a transform on one of the fields there that is causing the issue.

---

<div class="post-metadata">

**Author:** ![chandracmmohan27](https://avatars.discourse-cdn.com/v4/letter/c/ce7236/32.png) [@chandracmmohan27](https://developer.sailpoint.com/discuss/u/chandracmmohan27)\
**Post date:** [March 23, 2022, 4:37pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/6 "2022-03-23T16:37:03Z")

</div>

Thankyou @krigney @briane_bullock

The problem is with the transforms and i have rectified the error.

Thankyou.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/ad-account-creation-from-inow/3479/7 "2023-07-19T14:22:46Z")

</div>

Closed on July 19, 2023, 2:22pm UTC


