Attribute sync in Identitynow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,

I’m trying to pass the Identity attribute value : 9223372036854775807 to the AD account attribute :“accountExpires”. Could someone help me to fix the below error.

[“Error(s) reported back from the IQService - Failed to update attributes for identity CN\u003ddpriceidn,OU\u003dUsers,OU\u003dIHA,OU\u003dSailPoint IdentityNow Test OU,OU\u003dBuffalo,DC\u003dindependenthealth,DC\u003dcom. The attribute syntax specified to the directory service is invalid.\n”]

I doubt that error is happening because the Identity attribute value is string format where as account attribute : “accountExpires” is in Large Integer format.

If that is problem, How to convert the string value into Large integer to pass the value into AD account attribute.

2

Try to set it to 0, its the same as 9223372036854775807.

More info here :
https://documentation.sailpoint.com/connectors/active_directory/help/integrating_active_directory/provisioning_reference.html?Highlight=accountExpires

3

If you want to keep it simple by reading and provisioning in AD format only, set parameter timeZone=epoch in the Source and aggregate all users again. Then, the date provisioning will be accepted by AD.

3 Likes