Hello, We have a Role for one of our AD Domains that assigns group membership and should provision an AD Account if one does not exist for the Identity. When the Role is assigned, the provisioning is attempted, but getting this error - java.lang.RuntimeException: sailpoint.thunderbolt.service.Not…

You can do that using an identity attribute, with a concat transform that provides your “fi” and “ln” attributes. Then map that identity attribute to the sAMAccountName attribute on the Active Directory create profile.

The “UserNameGenerator” transform type actually only works on the Account ID of the source, not the Account Name attribute. So you could use it to define a distinguishedName, but not a sAMAccountName. Editing to add: changing the account ID of an AD source will break provisioning.

Hi Christopher, Expanding on Kevin, you can only use this type of transform for sAMAccountName: Account Profile Attribute Generator (from Template) | SailPoint Developer Community If you only need to use one type of naming convention, this should be sufficient. If you need to do more complex logi…

If I try to use the ‘Account Profile AttributeGenerator (from Template)’, does this need to get uploaded/approved for use? I’m just trying to get sAMAccountName to be a static ‘12345’ + first initial + lastname I removed my initial transform just to see if an account would provision and it did. S…

Tried to give you a :heart: on your reply but I guess I give to many of those out!!! Thanks, concat worked. [image] [image]

AD Account Provisioning Error

Identity Security Cloud (ISC) ISC Discussion and Questions

David_Norris (Terry Yau) March 4, 2026, 6:20pm 3

Other than the generator, in the AD source JSON, the authorizationType key shows up three times (in connectorAttributes.forestSettings, connectorAttributes.domainSettings, and connectorAttributes levels). Do you have all three?

"Create Account" for Active Directory is returning an error - "Required string attribute 'User' is not defined, it must have a valid value."

Topic		Replies	Views
Unable to provision new accounts in AD ISC Discussion and Questions identity-security-cloud , provisioning	21	199	June 3, 2025
"Create Account" for Active Directory is returning an error - "Required string attribute 'User' is not defined, it must have a valid value." ISC Discussion and Questions identity-security-cloud , provisioning , active-directory	4	81	June 2, 2026
Unable to create AD account in ISC ISC Discussion and Questions identity-security-cloud , connectors	15	286	December 23, 2025
AD Create Account - sAMAccountName not unique ISC Discussion and Questions identity-security-cloud , provisioning	12	407	June 15, 2025
Usernamegeneration ISC Discussion and Questions transforms , identity-security-cloud , provisioning	19	559	July 16, 2024

AD Account Provisioning Error

Related topics