Hey Guys, I have done the provisioning successfully before as well with same number of attributes in prov policy and it was successfull but now i got the error below [image] any idea why ? please help

Hello @Rakesh_Singh_1234 , The best option on an AD source is by checking the IQService logs. Another way to verify wich attribute is failing is trying with the minimun Attrbiutes and adding one by one. Regards, Pablo

hey @pablonovoa but it there any way to find any details of the attributes oN UI TENANT that are failing i can just see red dot in front of attributes in account acvtivity but no details

No, actually there is no way to find which attribute is failing. I hope it is on the future because sometimes we are not able to log into the IQService Machines or Virtual Appliances. REgards, Pablo

Hi @Rakesh_Singh_1234 , Can you check from search and provide the Account Activity and Events for the particular user. Thank you!

yes they should provide a “i” BUTTON in front of failed attributes that should have a 2 -3 liner error details of why that attribute failed on the sailpoint ui tenant itself. they should introduce that button as an update

@Abhishek_1995 i chechked but the main problem is that initially got one user created successfully with same number of attributes in create policy and now with same number of attributes only i provisioned one more user but it is showing that some atttributes arent updated properly not able to unders…

@Rakesh_Singh_1234 Have you check the what ever the value you are passing for the user its there or not?

If there is any issue with one of the attributes in Provisioning Plan (like no matching attribute found on AD side) then rest of the attributes will be skipped even if they match. Check your Create Account profile and see if there is any attribute included there which does not exist on AD side

@iamnithesh thanks nitesh one more query is it happening becasue i set the password in AD create policy as static as of now ?

and by matching attribute u mean the existing account in AD should have the same value for that attribute as per our provisioning for example : if userprincipalname in AD existing account is userid@xyz.com and we are only mapping UPN with userid directly in create account then also it will have so…

AD account is created but attributes are not updated properly

Identity Security Cloud (ISC) ISC Discussion and Questions

iamnithesh (Nithesh Rao) April 7, 2025, 1:01pm 15

I meant to say all attribute names in your Create Account Profile should have a matching attribute name in AD

Topic		Replies	Views
AD Account Creation and Update ISC Discussion and Questions provisioning	5	1676	August 7, 2023
I am getting error while AD provisioning . i can see the account got created but it says some attributes are not updated properly ISC Discussion and Questions identity-security-cloud	9	119	June 6, 2025
AD: Account created but some attributes are not updated properly ISC Discussion and Questions identity-security-cloud , provisioning	4	1712	January 15, 2024
New AD Account Failing to Update Attributes IIQ Discussion and Questions identityiq , accounts , active-directory	5	63	December 14, 2025
Update Provisioning policy attribute added during create ISC Discussion and Questions	1	1277	July 19, 2023

AD account is created but attributes are not updated properly

Related topics