Attribute Synchronization Fails with Timeout When Running for All Identities – Entra ID

[hkhandale (Harsh Khandale)]

Hi all,

I’ve enabled Attribute Synchronization for my Entra ID source in SailPoint IdentityNow.

What’s Working:

When I trigger attribute sync manually for an individual identity, it works as expected and updates the attributes on the target.

Issue:

However, when I run aggregation and try to trigger sync for all identities, I receive the following error in the event logs:

css

CopyEdit

["sailpoint.connector.ConnectorException: Command timed out"]

This results in “Modify Account Failed” errors for multiple identities.

Question:

• Is there a way to resolve this timeout issue when syncing in bulk?

[agutschow (Alicia Gutschow)]

Try increasing the provisioning timeout:

Timeout Errors and Settings

[hkhandale (Harsh Khandale)]

Hi @agutschow

Could you please provide API URL to fetch Current provisioning timeout, and to set new timeout?

[hkhandale (Harsh Khandale)]

I am getting error while executing below JSON,

URL - PATCH https://sailpoint.api.identitynow.com/v3/sources/1234567890sourceID

Header - Content Type - application/json-patch+json

Body-
[
{
“op”: “replace”,
“path”: “/connectorAttributes/aggregateTimeout”,
“value”: 45
}
]

Error -

{
“detailCode”: “400.1 Bad request content”,
“trackingId”: “d5bc9d603fc345fba3f77c9e7745b176”,
“messages”: [
{
“locale”: “und”,
“localeOrigin”: “REQUEST”,
“text”: “The request was syntactically correct but its content is semantically invalid.”
},
{
“locale”: “en-US”,
“localeOrigin”: “DEFAULT”,
“text”: “The request was syntactically correct but its content is semantically invalid.”
}
],
“causes”:
}

[hkhandale (Harsh Khandale)]

as I can see in my source following variable in
"connectorAttributes" object:

1. healthCheckTimeout
2. channelFilter
3. groupsDeltaToken
4. idnProxyType
5. clientCertificate
6. clientID
7. deltaAggregationEnabled
8. mailContactFilter
9. pageSize
10. manageAdminConsentedPermissions
11. connectionType
12. exoAuthenticationType
13. spnAccountFilter
14. spConnectorInstanceId
15. userDeltaToken
16. cloudExternalId
17. clientSecret
18. isCaeEnabled
19. aggregateHiddenAccessPackages
20. spnManageAzureADPIM
21. aggregateAllGroups
22. aggregateGroupHierarchy
23. manageO365Groups
24. sourceConnected
25. userFilters
26. directoryRolesDeltaToken

i am unable to find
provisioningTimeout and aggregateTimeout

So how this will work

“/connectorAttributes/aggregateTimeout”

need help to fix it

[hkhandale (Harsh Khandale)]

I can increase time for healthCheckTimeout
because It is part of the object