Hi Team, I’m getting error during creation of AD account. There are different OUs in AD, and account object needs to be created basis on a city-OU mapping given. I am using lookup transform on primaryGroupDN accnt attribute to derive the OU. Then using generator “Create Unique Account ID” & pattern…

Hi @bhuvi_kpmg , I think you are confused with the Create Account ID generator and the Username generator transform. [image] For the Username Generator transform you are trying, below is the related document. Username Generator | SailPoint Developer Community Derive a unique value …

Just to avoid any generic issue which might have been overlooked have you tried creating an account in a static OU for the time being and then perform the lookup transofrm based OU calculation?

And you are setting the objectClass in the provisioning policy because it does point to a specific attribute calling it User in the error log that you have shared. Because I think you have to declare the objectClass when AD account is being created quoted below: Mandatory AD user object attributes …

I think unique counter might be a problem [Screenshot_20240418_195409_Chrome] This is what documentation say about it.

[image] Aman Kumar Singh: 0 logon name of the object I do have the “User” object in the create provisioning policy. "name": "Account", "description": null, "usageType": "CREATE", "fields": [ { "name": "ObjectType", "transform": { "t…

Moved the DN mapping to uniqueCounter pattern to the end. Still same error. [image]

I aee counter still not on the end, I’d suggest to generate cn first with generator and counter on the end and then add the dn part

Try something like that { "attributes": { "cloudMaxSize": "200", "cloudMaxUniqueChecks": "10", "cloudRequired": "true" }, "isRequired": false, "multi": false, "name": "distinguishedName", "transform": { "type": "usernameGenerator", "attributes": { "sourceCheck…

[image] Kamil Jakubiak: ou This worked, thank a lot Joseph.

Getting error during create account for AD

Identity Security Cloud (ISC) ISC Discussion and Questions

bhuvi_kpmg (Bhuvnesh Kumar) April 18, 2024, 5:47pm 3

Yes, with static OU it is working

Unique Ldap Attribute For mail address

Topic		Replies	Views
Usernamegeneration ISC Discussion and Questions transforms , identity-security-cloud , provisioning	19	677	July 16, 2024
AD Account Creation Error ISC Discussion and Questions transforms , identity-security-cloud , provisioning , sources	13	4561	May 10, 2023
Unable to create AD account in ISC ISC Discussion and Questions identity-security-cloud , connectors	15	417	December 23, 2025
Error with AD account ISC Discussion and Questions	11	7524	March 28, 2023
Error while generating unique distinguishedName for AD Provisioning in SailPoint ISC ISC Discussion and Questions transforms , identity-security-cloud , provisioning	9	311	February 14, 2025

Getting error during create account for AD

Related topics