Hey Guys, i have made a transform that fetch user’s manager dn of AD. It is working fine for existing users and fetching manager dn but when i onboarded new user( i am using flat file connector for mimiking the real workday for testing) so when i am onboaridng new users it is giving me error : T…

When an identity’s manager is not yet created then that identity will not have manager DN, but I don’t think manager attribute is mandatory to create AD account. For a new identity if manager exists already, first Identity will be created with all attributes defined in Identity Profile. So you shou…

Because you are building methods on null object. Create AD DN Identity attribute, which will have value from AD account. Use Get Referenced Identity attribute transform

hey krishna i used this as well but that wasnot giving me any error but always showed blank in managerdn while previwing it in identity priflie i used this : { “name”: “Get manager distinguishedName”, “type”: “rule”, “attributes”: { “uid”: “manager”, “name”: “Cloud Services Deployment Utility”…

so i defined two attr in identuty profile one is addn and one is manager dn where both on both attr sources are active directory and attributes are distinguisdhed name i mapped with and on managerdn i applied getrereceidenattr rule but i got addn populated but managerdn is not populating

@Carlatto Can u please help here?

You need to check if every user including manager has adDn attribute populated first. Later you will get the value for managerDn attribute. Did you create these 2 attributes at a time ?

yes [image] [image] it is populating for existing users who got AD account already but when i am onboaridng new users the transform fails and as a result (AD account dont get provison as BR)

In your create profile for AD are you pointing the Manager attribute to the ManagerDN cube attribute? You might also need to do an unoptimized agg on your AD source in order to have adDn populate for all users.

yes but the problem is for existing users who have ad account (both user and his manager) the transform is runnung good but when we are onboarding new user from workday then it is having error

Are you tracking the DN in Workday? So basically you need a way to map the Workday Manager to the DN. Workday Idenity Profile: [{D34BB498-2CA2-4162-8803-8757DA9476B3}] AD Create Account Profile: [{4CD242CF-86FD-49EB-AE65-7A4F11E47EB9}] { "name": "manager", "transform":…

Having issue with the manager dn transform that fetch AD DN of user's manager

Identity Security Cloud (ISC) ISC Discussion and Questions

KRM7 (Krishna Mummadi) March 11, 2025, 9:21am 4

You need to check adDn attribute of manager, refresh the manager first.

Topic		Replies	Views
[IdentityNow] Manager DN Transform for AD Create Policy ISC Discussion and Questions transforms , identity-security-cloud , provisioning	15	1794	September 10, 2023
Get manager Name from ManagerID attrbute ISC Discussion and Questions transforms , identity-security-cloud , provisioning	4	307	July 29, 2024
FirstValid Transform for Manager DN in AD Provisioning ISC Discussion and Questions transforms , identity-security-cloud , provisioning	5	139	May 18, 2025
Get manager DN from an Identity in an Update Policy ISC Discussion and Questions transforms , identity-security-cloud	6	349	October 18, 2024
MANAGER Display when ACTIVE DIRECTORY is AUTH source ISC Discussion and Questions identity-security-cloud , provisioning , identity-profiles	12	257	July 16, 2024

Having issue with the manager dn transform that fetch AD DN of user's manager

Related topics