Error during Linux user provisioning – useradd command fails with Status: 2

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hello Community,

I am working on provisioning a user from SailPoint IdentityIQ (v8.3) to a Linux server using the Linux connector. While trying Provisioning by going through Manage user account and requesting account for Linux Application, I receive the following error:

sailpoint.connector.InvalidResponseException: [ InvalidResponseException ] [ Possible suggestions ] Make sure standalone command works with the UNIX terminal. The standalone command is - useradd [ Error details ] Command failed. Status: 2 , Output: Usage: useradd [options] LOGIN useradd -D useradd -D [options] Options: --badname do not check for bad names -b, --base-dir BASE_DIR base directory for the home directory of the new account --btrfs-subvolume-home use BTRFS subvolume for home directory -c, --comment COMMENT GECOS field of the new account -d, --home-dir HOME_DIR home directory of the new account -D, --defaults print or change default useradd configuration -e, --expiredate EXPIRE_DATE expiration date of the new account -f, --inactive INACTIVE password inactivity period of the new account -F, --add-subids-for-system add entries to sub[ud]id even when adding a system user -g, --gid GROUP name or ID of the primary group of the new account -G, --groups GROUPS list of supplementary groups of the new account -h, --help display this help message and exit -k, --skel SKEL_DIR use this alternative skeleton directory -K, --key KEY=VALUE override /etc/login.defs defaults -l, --no-log-init do not add the user to the lastlog and faillog databases -m, --create-home create the user's home directory -M, --no-create-home do not create the user's home directory -N, --no-user-group do not create a group with the same name as the user -o, --non-unique allow to create users with duplicate (non-unique) UID -p, --password PASSWORD encrypted password of the new account -r, --system create a system account -R, --root CHROOT_DIR directory to chroot into -P, --prefix PREFIX_DIR prefix directory where are located the /etc/* files -s, --shell SHELL login shell of the new account -u, --uid UID user ID of the new account -U, --user-group create a group with the same name as the user -Z, --selinux-user SEUSER use a specific SEUSER for the SELinux user mapping --extrausers Use the extra users database
2

Hi @Viraj Could you share the provisioning policy and also share the flavour of Linux?

3

The error indicates that IIQ is trying to run the useradd command but the syntax is incomplete — that’s why you see the help/usage output. This usually happens if required arguments (like -m, -d, -s) are missing from the provisioning plan or the connector configuration.

Please check:

  1. The Linux connector application settings (account create command).

  2. Ensure the provisioning attributes (username, home directory, shell, etc.) are mapped correctly.

  3. Test the exact useradd command manually on the target server to confirm it works.

Once the right arguments are configured, the provisioning from IIQ should succeed.