Email Not created New Hires

SailPoint Human Fabric (SHF) SHF Discussion and Questions
, ,
1

I’m encountering an issue with Active Directory provisioning through the LDAP Connector.
A new AD account is being created successfully during provisioning. However, several attribute updates fail during the post-create modify operation.
The provisioning activity shows:
Committed: Sent to the connector

Connector Error
Account created but some attributes are not updated properly.

Failed to update attributes for identity

CN=KouserAr4,OU=IN,OU=Users,OU=.Resources,DC=chubbfsad,DC=com

The specified directory service attribute or value does not exist.
The account should be created with:
mail = arshiya.kouser@chubbfs.com

userPrincipalName = arshiya.kouser@chubbfs.com
The account is created, but the email remains:
Please find the attached Provisioning policy:
{

"nativeObjectType": "User",

"identityAttribute": "distinguishedName",

"displayAttribute": "sAMAccountName",

"hierarchyAttribute": null,

"includePermissions": false,

"features": \[\],

"configuration": {},

"attributes": \[

    {

        "name": "businessCategory",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "business category",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "carLicense",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "vehicle license or registration plate",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "cn",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "common name(s) for which the entity is known by",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "departmentNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "identifies a department within an organization",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "description",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "descriptive information",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "destinationIndicator",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "destination indicator",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "displayName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "preferred name to be used when displaying entries",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "distinguishedName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "distinguished name for which the entity is known by",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "employeeNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "numerically identifies an employee within an organization",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "employeeType",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "type of employment for a person",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "facsimileTelephoneNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Facsimile (Fax) Telephone Number",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "givenName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "first name(s) for which the entity is known by",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "homePhone",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "home telephone number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "homePostalAddress",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "home postal address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "initials",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "initials of some or all of names, but not the surname(s).",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "internationaliSDNNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "international ISDN number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "l",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "city",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "mail",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "RFC822 Mailbox",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "manager",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "DN of manager",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "mobile",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "mobile telephone number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "o",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "organization this object belongs to",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "ou",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "organizational unit this object belongs to",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "pager",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "pager telephone number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "physicalDeliveryOfficeName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Physical Delivery Office Name",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "postOfficeBox",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Post Office Box",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "postalAddress",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "postal address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "postalCode",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "postal code",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "preferredDeliveryMethod",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "preferred delivery method",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "preferredLanguage",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "preferred written or spoken language for a person",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "registeredAddress",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "registered postal address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "roomNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "room number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "secretary",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "DN of secretary",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "seeAlso",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "DN of related object",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "sn",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "last (family) name(s) for which the entity is known by",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "st",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "state or province which this object resides in",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "street",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "street address of this object",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "telephoneNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Telephone Number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "teletexTerminalIdentifier",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Teletex Terminal Identifier",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "telexNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Telex Number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "title",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "title associated with the entity",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "uid",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "user identifier",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "objectClass",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "object classes of the entity",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "memberOf",

        "nativeName": null,

        "type": "STRING",

        "schema": {

            "type": "CONNECTOR_SCHEMA",

            "id": "2c91808882fa0a4a018313dd1144049e",

            "name": "group"

        },

        "description": "Group Membership",

        "isMulti": true,

        "isEntitlement": true,

        "isGroup": true,

        "isManaged": false

    },

    {

        "name": "objectSid",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Windows Security Identifier",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "objectguid",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Object globally unique identifier ",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "sAMAccountName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "sAMAccountName",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "primaryGroupID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "RID of users primary group",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "primaryGroupDN",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "DN of users primary group",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "accountFlags",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "List of the flags enabled on an account",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "department",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "User's department",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msNPCallingStationID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "CallingStationID",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msRADIUSFramedRoute",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Static Routes for Dial-In connection",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msNPAllowDialin",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Is dial-in allowed",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msRADIUSCallbackNumber",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Callback Number",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msRADIUSFramedIPAddress",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Define Static IP Address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "mailNickname",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Exchange Alias",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "homeMDB",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Exchange Database",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msExchHideFromAddressLists",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Hide from Exchange address lists",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msRTCSIP-UserEnabled",

        "nativeName": null,

        "type": "BOOLEAN",

        "schema": null,

        "description": "User enabled for Lync Server",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "SipAddress",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Lync sipAddress",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "RegistrarPool",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Lync Registrar pool",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "LyncPinSet",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Lync user pin set status",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "LyncPinLockedOut",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Lync user pin lock status",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "pwdLastSet",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Time of last password reset",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msDS-PrincipalName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Name of the entity in the format \\"NetBIOS domain name\\\\sAMAccountName\\"",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "userPrincipalName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "The unique name of the entity within the domain, in the format \\"name@domain\\"",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "externalEmailAddress",

        "nativeName": "targetAddress",

        "type": "STRING",

        "schema": null,

        "description": "External email address of Mail User",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "dNSHostName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Fully Qualified Domain Name for the Service Account",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msDS-ManagedPasswordInterval",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Password change interval in days for the Managed Service Account",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msDS-SupportedEncryptionTypes",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Supported Encryption Types for the Managed Service Account",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msDS-GroupMSAMembership",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Principals allowed to use Group Managed Service Account",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msDS-AllowedToActOnBehalfOfOtherIdentity",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Principals that can act on the behalf of Group Managed Service Account",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "servicePrincipalName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Service principal names for the Service Account",

        "isMulti": true,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "objectType",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Type of Active Directory object",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "shadowAccountDN",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "DistinguishedName of the Linked Mailbox shadow account",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "shadowAccountGuid",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "ObjectGuid of the Linked Mailbox shadow account",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "msExchRecipientTypeDetails",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Type of the Microsoft Exchange recipient object",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "memberOfSharedMailbox",

        "nativeName": null,

        "type": "STRING",

        "schema": {

            "type": "CONNECTOR_SCHEMA",

            "id": "2c91808882fa0a4a018313dd1144049f",

            "name": "sharedMailbox"

        },

        "description": "List of Shared Mailboxes to which user has permissions",

        "isMulti": true,

        "isEntitlement": true,

        "isGroup": true,

        "isManaged": false

    },

    {

        "name": "GlobalUID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Custom Attribute",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "middleName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "User Middle Name",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "c",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Physical short country code for address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "co",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Country Name for address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "countryCode",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Numerical code for address",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "company",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Company Name",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-WorkDayEmployeeID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-WorkDayEmployeeID",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-EmployeeID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-EmployeeID",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-WorkDayLoginID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-WorkDayLoginID",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-AADSyncFilter",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-AADSyncFilter",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-Ext01",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-Ext01",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-UTCUniqueID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-UTCUniqueID",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-IDType",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-IDType",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-Region1",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-Region1",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-Region2",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-Region2",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-UserType",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-UserType",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-BusinessUnit",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-BusinessUnit",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-ManagingEntity",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-ManagingEntity",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-BusinessEntity",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-BusinessEntity",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "utc-com-1987-LDAP-LegalEntityName",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "utc-com-1987-LDAP-LegalEntityName",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute1",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 1",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute2",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 2",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute3",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 3",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute4",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 4",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute5",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 5",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute6",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 6",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute7",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 7",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute8",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 8",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute9",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 9",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute10",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 10",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute11",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 11",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute12",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 12",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute13",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 13",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute14",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 14",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "extensionAttribute15",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Extension Attribute 15",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "cHBCom2023LDAPEngineer",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Values=Field or Office",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "chb-com-2023-LDAP-HFMHierarchy",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Chubb Specific Custom Attribute",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "chb-com-2023-LDAP-HFM",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Chubb Specific Custom Attribute",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "chb-com-2023-LDAP-TermDate",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "ChubbFS Custom Attribute",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "chb-com-2023-LDAP-LongTermSick",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "ChubbFS Custom Attribute",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "userAccountControl",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "514 for Inactive",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    },

    {

        "name": "employeeID",

        "nativeName": null,

        "type": "STRING",

        "schema": null,

        "description": "Employee ID of the Account",

        "isMulti": false,

        "isEntitlement": false,

        "isGroup": false,

        "isManaged": false

    }

\],

"id": "2c91808882fa0a4a018313dd1144049d",

"name": "account",

"created": "2022-09-06T17:33:18.532Z",

"modified": "2026-07-03T06:24:12.364Z"

}

image
image1075×619 126 KB

image
image1091×753 147 KB

image
image1044×593 111 KB

image
image1079×772 111 KB

2

Hi @ravikumar7284

Can you confirm if you are using a VA-based AD Connector for this integration? Because in the message you mentioned LDAP Connector.

3

Verify all the attributes present in the Provisioning Policy is added to the account or not.
Please share the Create Account Provisioning Policy file for this Source.

4

Hi @kumarSinghM Yes, Its VA based connector.

5

I have added the provisioning policy for this source in The Above

6

Provide me the screenshot of your Create Account page.

7

image
image883×570 64.5 KB

image
image788×675 73 KB

image
image914×640 70.3 KB

image
image792×661 71.9 KB

image
image780×688 73.4 KB

image
image796×551 69.5 KB

image
image799×567 61.2 KB

image
image786×676 86.6 KB

image
image801×663 78.1 KB

image
image780×601 78.8 KB

image
image805×676 84.2 KB

image
image781×655 74.9 KB

image
image779×670 80.1 KB

image
image790×640 84 KB

image
image832×587 79.3 KB

image
image785×665 71.3 KB

image
image794×674 82.4 KB

image
image847×669 83.5 KB

image
image821×665 85.1 KB

image
image751×458 49.6 KB

8

Hi @ravikumar7284

This error usually occurs when one or more attributes do not comply with the Active Directory schema constraints, or when the required object class is missing. If a single attribute fails validation, ISC stops processing the remaining attribute updates and returns this generic error.

In your previous screenshot, I noticed that you added several custom attributes.

I would suggest the following:

  1. In your Create Account provisioning policy, update the objectClass attribute to include the custom object class required for your custom attributes.

    image
    image946×267 32.6 KB

    Instead of:

    User

    use:

    User,<YourCustomObjectClass>

  2. Test the account creation again.

  3. If the error still persists, temporarily remove all custom attributes from the provisioning policy and test the account creation again.

  4. If the account is created successfully, add the custom attributes back one at a time until you identify the attribute that does not meet the AD schema constraints.

Note :

I also noticed that your previous comment contains what appears to be sensitive information, such as your Active Directory domain name. If this is a real production domain, I would recommend removing or masking that information before posting publicly.

9

Hi @baoussounda ,
The issue happening only for new hires created today. Before account creation working as expected, Not sure changes happened in AD side. AD account created for user and mail and UPN shows blank.

10

@ravikumar7284 I initially thought this was a new provisioning policy setup, but I understand that it was working before.

Have you made any changes to your provisioning policy recently? Also, are only the UPN and mail attributes blank ?

11

The error “Account created but some attributes are not updated properly.” is almost always caused by Active Directory rejecting one or more attributes because they do not comply with the AD schema constraints (for example, an invalid value, a missing required object class, or an attribute that is not allowed for that object class).

12

Hi Ravi,

better refer Microsoft AD official page where attribute data type, case, all mentioned according to that you can move ahead.
Its working for one case and not for others, better remove all custom one , try using extendedAttribute.

Its AD attribute data type may be issue and name how you have mentioned that also matter. for manager too you getting issue, so try to first refresh or synch AD and SailPoint then try for fresh Provisioning process

13

Hello Ravikumar,

So the thing to understand here is how the AD connector actually handles account creation. It’s a two-step process. First it creates the account with just the bare minimum (CN, sAMAccountName, objectClass, password). Then it sends a separate MODIFY operation to set everything else, all remaining attributes from your provisioning policy in a single batch.

Here is where it gets tricky. If even one attribute in that modify batch fails validation on the AD side, AD rejects the entire modify. Every attribute in that batch fails together. That’s exactly why your mail and userPrincipalName are showing blank. They’re probably fine on their own, but some other attribute in the same batch is the actual culprit and it’s dragging everything else down with it.

14

Since this was working before and only started failing for today’s new hires, I would compare one successful old provisioning activity with one failed activity from today. Check the exact values sent for mail, userPrincipalName, manager, country/countryCode, and the custom LDAP attributes.

I would especially check the custom attributes like utc-com-1987-LDAP-*, chb-com-2023-LDAP-*, cHBCom2023LDAPEngineer, chb-com-2023-LDAP-HFMHierarchy, and GlobalUID. If any of those attributes no longer exist in AD schema, are misspelled, are not allowed on the user object, or are getting null/invalid values for today’s hires, AD can reject the update.

To isolate it quickly:

  1. Check the provisioning activity details and attribute-level results, if available.
  2. Check the VA connector logs under /home/sailpoint/log/. The LDAP error there may show the exact attribute/value AD rejected.
  3. If the failed attribute is still not clear, test once by removing the custom attributes from the Create Account policy and keep only the required AD attributes. If mail and userPrincipalName populate after that, add the custom attributes back in small batches until it fails again.

Also, the JSON shared in the post looks like the account schema, not the actual Create Account provisioning policy. The Create Account policy JSON would be more useful here because that is what controls which attributes ISC sends during account creation.

Suggestion: your screenshots seem to show real domain/DN details. Better to mask those before leaving them public.

15

Hello,

This is a very common issue which is caused due to Custom Attributes which we add inside the Create Account - Provisioning Policy of AD. I have also faced it in the past.

  1. Kindly check the names of all attribute (Technical Names) are correct as per AD or not?
  2. If they are OK, then, check whether any attributes have got any constraints attached to it?
  3. I would recommend adding custom attributes in batches and test the AD account creation so that you can pinpoint which could be attributes or set of attributes are causing issues.
16

Hi Harish,
Please find the provisioning policy for AD source,
{

"name": "Account",

"description": null,

"usageType": "CREATE",

"fields": \[

    {

        "name": "ObjectType",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "User"

            }

        },

        "attributes": {

            "cloudRequired": "true"

        },

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "distinguishedName",

        "transform": {

            "type": "rule",

            "attributes": {

                "name": "Create Unique Account ID"

            }

        },

        "attributes": {

            "template": "CN=$(adCn)$(uniqueCounter),OU=$(country),OU=Users,OU=.Resources,DC=chubbfsad,DC=com",

            "cloudMaxUniqueChecks": "50",

            "cloudRequired": "true"

        },

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "sAMAccountName",

        "transform": {

            "type": "rule",

            "attributes": {

                "name": "Create Unique LDAP Attribute"

            }

        },

        "attributes": {

            "template": "$(adSamaccountname)$(uniqueCounter)",

            "cloudMaxUniqueChecks": "50",

            "cloudMaxSize": "20",

            "cloudRequired": "true"

        },

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "displayName",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "displayName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "manager",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "adManagerDn"

            }

        },

        "attributes": {

            "cloudRequired": "true"

        },

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "mail",

        "transform": {

            "type": "rule",

            "attributes": {

                "name": "Create Unique LDAP Attribute"

            }

        },

        "attributes": {

            "template": "$(emailPrefix)$(uniqueCounter)@$(adDomain)"

        },

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "password",

        "transform": {

            "type": "rule",

            "attributes": {

                "name": "Create Unique LDAP Attribute"

            }

        },

        "attributes": {

            "template": "$(globaluid)$(country)!",

            "cloudRequired": "true"

        },

        "isRequired": false,

        "type": "secret",

        "isMultiValued": false

    },

    {

        "name": "givenName",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "preferredFirstName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "sn",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "preferredLastName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "middleName",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "preferredMiddleName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "userPrincipalName",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "$mail"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "pwdLastSet",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "true"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "boolean",

        "isMultiValued": false

    },

    {

        "name": "IIQDisabled",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "false"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "boolean",

        "isMultiValued": false

    },

    {

        "name": "primaryGroupDN",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "CN=chubbfsad.com Domain Users,CN=Users,DC=chubbfsad,DC=com"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "description",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "title"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "telephoneNumber",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "workPhone"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "c",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "country"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "co",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "countryName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "countryCode",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "countryNumber"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "company",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "companyName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "department",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "deptName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "division",

        "transform": null,

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "employeeType",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "A"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "GlobalUID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "globaluid"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "homePostalAddress",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "Active"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "l",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "city"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "mobile",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "mobile"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "physicalDeliveryOfficeName",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "mail RemoteMailbox"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "postalCode",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "zip"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "st",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "state"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "street",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "street"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "title",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "title"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-WorkDayEmployeeID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "identificationNumber"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-EmployeeID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "essId"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-WorkDayLoginID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "login"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-AADSyncFilter",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "AADSync"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-Ext01",

        "transform": null,

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-UTCUniqueID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "globaluid"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-IDType",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "User"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-Region1",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "region1"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-Region2",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "country"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-UserType",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "workerType"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-BusinessUnit",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "businessUnit"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-ManagingEntity",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "managingEntity"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-BusinessEntity",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "businessEntity"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "utc-com-1987-LDAP-LegalEntityName",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "companyName"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "extensionAttribute12",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "workdayMsLicence"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "chb-com-2023-LDAP-HFM",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "hfmEntity"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "chb-com-2023-LDAP-HFMHierarchy",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "hfmEntityHierarchy"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "chb-com-2023-LDAP-TermDate",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "endDate"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "chb-com-2023-LDAP-LongTermSick",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "loaDate"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "cHBCom2023LDAPEngineer",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "fieldClassification"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "userAccountControl",

        "transform": {

            "type": "static",

            "attributes": {

                "value": "514"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    },

    {

        "name": "employeeID",

        "transform": {

            "type": "identityAttribute",

            "attributes": {

                "name": "identificationNumber"

            }

        },

        "attributes": {},

        "isRequired": false,

        "type": "string",

        "isMultiValued": false

    }

\]

}

17

Hello Ravikumar Kuruba,

I agree what @bapata is try to say , where i also faced the same issue , earlier when i have check for the atrribute constrain and recorrected that the issue resolved so try to disable the recent attribute created in create account and check onceagain

18

I went through the JSON, and the mail/UPN logic itself looks okay. So I don’t think mail/UPN is the root issue. If mail fails to update, UPN will also stay blank because it depends on $mail.

The fields I would check first are these:

  1. division and utc-com-1987-LDAP-Ext01: Both are present in the Create Account policy, but both have transform: null. If these are not needed during create, I would remove them from the Create Account policy and test once.
  2. countryCode : This is mapped from countryNumber. For AD, make sure the value is a valid numeric country code, like 356 for India. Also confirm c, co, and countryCode are all resolving correctly.
  3. manager : You are passing adManagerDn. For AD, this should be the full manager DN. If today’s new hires have blank/invalid manager DN, or the manager account is not present in AD, this can fail.
  4. Custom LDAP attributes : I would recheck all custom attributes like utc-com-1987-LDAP-*, chb-com-2023-LDAP-*, cHBCom2023LDAPEngineer, and GlobalUID. One wrong custom attribute name or one invalid value can cause this type of AD error.

The quickest way to avoid guessing is to enable/check setAttributeLevelResult on the AD source and set it to "true" as a string. Then retry one failed user. That should show which exact attribute AD rejected. AD connector troubleshooting docs cover this.

Based on this policy, mail and userPrincipalName look more like side effects, not the root cause.

19

Hi Manish,
I have added provisioning policy for this source.

20

Hi @ravikumar7284 Can you confirm the Manager DN value is correct and exists on the source?