AD Create Group Provisioning form is not Invoking

Which IIQ version are you inquiring about?

8.4

We are creating the AD group using Provisioner API and group is also created on AD successfully.
We have defined the create group provisioning policy form but it’s not invoking the form, and not deriving the attributes from there.
Does anyone face this issue and is there any workaround?

Below Sample Snippet we are using to create the group on AD
ProvisioningPlan plan = new ProvisioningPlan();
String appName = “CORPAD”;
String groupname = “DL-APK-TEST47”;
String wholeDN = “CN=”+groupname+“,OU”;
ProvisioningPlan.ObjectRequest objRequest = new ProvisioningPlan.ObjectRequest();
objRequest.setApplication(appName);
objRequest.setNativeIdentity(groupname);
objRequest.setTargetIntegration(appName);
objRequest.setOp(ProvisioningPlan.ObjectOperation.Create);
objRequest.setType(“group”);
objRequest.setNativeIdentity(wholeDN);
objRequest.add(new ProvisioningPlan.AttributeRequest(“distinguishedName”, ProvisioningPlan.Operation.Set,wholeDN));
objRequest.add(new ProvisioningPlan.AttributeRequest(“sAMAccountName”, ProvisioningPlan.Operation.Set,groupname));
objRequest.add(new ProvisioningPlan.AttributeRequest(“objectClass”, ProvisioningPlan.Operation.Set,“group”));
objRequest.add(new ProvisioningPlan.AttributeRequest(“GroupType”, ProvisioningPlan.Operation.Set,“Security”));
objRequest.add(new ProvisioningPlan.AttributeRequest(“displayName”, ProvisioningPlan.Operation.Set,groupname));
objRequest.add(new ProvisioningPlan.AttributeRequest(“sysManagedAttributeType”, ProvisioningPlan.Operation.Set,“group”));

plan.add(objRequest);
Provisioner prov = new Provisioner(context);
ProvisioningProject project = prov.compile(plan);
prov.execute(project);

It is creating the group but NOT invoking the crate group provisioning form, hence not deriving the attributes from there.

Hi @rushi_ambatkar,

As per my understanding you are creating plan by yourself and then using the provisioner API to create group and that might be causing it.

Are you sure that the provisioning policies have attribute which is different from what you are manually creating?

Thanks

@ashutosh08 Yes Correct, I am creating the plan and passing to the provisioner API to create group.

We have different attribute in create group provisioning policy form but its deriving the vale from there.

Can you please let me know if in your case if it’s invoking the create group provisioning policy form?

Thanks,
Rushi

Providing form for group creation will open when you trigger create from entitlement catalog .
Or you need to create custom quicklink and attach form to workflow to do that user can provide required input snd then call the code which you have shared to create group .

Hi @vishal_kejriwal1 Thanks for your response, as per your comment I understand that Providing form for group creation will not be invoked when we do the provisioning by creating the custom plan.

In our case we have multiple application where we are creating the group on target (different connectors) and some static attributes values that will not change any time, so we have planned to add in the create group provisioning policy form.

Can you please let me know if there is any workaround for this apart from you suggested.

Thanks,
Rushi

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.