Entra ID Saas connector issue - Account aggregation failure

[PriyankaRaoraneAD (Priyanka Raorane)]

Hello all,

I recently configured the Entra ID SaaS source in IDN. I have enabled all features in Feature Management and added a few more attributes to the account schema.

When I tested the account aggregation, it failed with the error below. Entitlement aggregation is working fine. The aggregation fails after processing around 17,000 accounts. I tried increasing the aggregation timeout, but the issue still persists.

Anyone having idea about this issue.

Thanks!

[vishal_kejriwal1 (Vishal Kejriwal)]

aggregateTimeout

Description: This parameter is set for the aggregation timeout.

Resolution: The default value is 30 seconds. If the timeout error continues, increase the value in 15 second increments and try again.

For example,

If your current time value is 30 seconds, update the aggregateTimeout attribute as follows:

[    
{        "op": "replace",        
"path": "/connectorAttributes/aggregateTimeout",        
"value": 45   
 },
]

[kanusha9 (Anusha Nallagrola)]

1. Check IdentityNow Logs with RequestId
2. Review Account Schema – Custom Attributes
3. Enable “Skip Failed Accounts”

[vbdm (Veera bhamidipati)]

Hi @PriyankaRaoraneAD ,

We have seen this error several times in our Entra ID setup, and the underlying issue was different many times.

So, the best way we found to dig was using the CLI tool. Once set up, this is a convenient tool.

Please see my post here on Cli:

Issue with Attribute Sync in Entra ID – HTTP 400 Error

After reading all your messages, this could be something that Entra ID is rejecting. To know the exact reason, if I were you, I would use cli tool, connect to Prod and then tail the logs, as mentioned here: Connectors | SailPoint Developer Community You will see something like this(outlined text): [image] Further, with Entra ID, I have seen that sandbox and prod connectors behave differently even when they are on the same version.