# \### \[Help Needed\] Writing Back Email from On-Prem AD to WebService Connector BambooHR

**URL:** <https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644>\
**Category:** IIQ Discussion and Questions\
**Tags:** webservice-connector, identityiq\
**Created:** [February 2, 2025, 10:21am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644 "2025-02-02T10:21:50Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![SuryenduB](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SuryenduB](https://developer.sailpoint.com/discuss/u/SuryenduB)\
**Post date:** [February 2, 2025, 10:21am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/1 "2025-02-02T10:21:50Z")

</div>

## Which IIQ version are you inquiring about?

_8.4_

## Please share any images or screenshots, if relevant.

_Update Account_

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/9/89dfcbcdfaa49f41a2fe9048dff9b004f27b49dc.png)

_Attribute Mapping_

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/6/d/6d65ea0119f697a7b6f5526586d5dcccbd8cd47b.png)

## Share all details about your problem, including any error messages you may have received.

### [Help Needed] Writing Back Email from On-Prem AD to WebService Connector BambooHR

Hi all,

I’m working on integrating **BambooHR** (a web service-based authoritative application) with our **on-prem Active Directory** for provisioning. The challenge I’m facing is **writing back the generated email from AD to BambooHR**.

### What I’ve Tried So Far:

1. **Lifecycle Workflow** :

2. **Web Service Connector Update Operation** :

### The Issue:

- The **Update Account** operation is **not being called** when the email is generated in AD.
- The writeback to BambooHR isn’t happening.

### Questions:

- Has anyone successfully **written back email attributes from AD to a web service-based HR system like BambooHR**?
- Do I need to explicitly **trigger the web service connector update operation** in a different way?
- Is there a missing configuration step I should check?

Any guidance or troubleshooting tips would be greatly appreciated! Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Akhil](https://avatars.discourse-cdn.com/v4/letter/a/7ab992/32.png) [@Akhil](https://developer.sailpoint.com/discuss/u/Akhil)\
**Post date:** [February 3, 2025, 1:26am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/2 "2025-02-03T01:26:44Z")

</div>

> [@SuryenduB](#):
>
> operation

Firstly, why there is need for multiple source mappings for email attribute?

The write depends on the API operation from WebService Connector, Remember updating Email id in target will pose few implications based on the application.

Can you print the plan by running the Identity Refresh task and see if the required information is being sent in the below format?

> **[Update Employee](https://documentation.bamboohr.com/reference/update-employee)**
>
> Update an employee, based on employee ID. If employee is currently on a pay schedule syncing with Trax Payroll, or being added to one, the API user will need to update the employee with all of the following required fields for the update to be...

Ideally, we can do a writeback from AD to respective target application.

---

<div class="post-metadata">

**Author:** ![SivaLankapalli](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sivalankapalli/32/22436_2.png) [@SivaLankapalli](https://developer.sailpoint.com/discuss/u/SivaLankapalli)\
**Post date:** [February 3, 2025, 6:02am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/3 "2025-02-03T06:02:02Z")

</div>

Hi @SuryenduB , Since the BambooHR system accepts the following required/mandatory fields on the POST method, please implement the Identity Attribute change event on email to update the email address on the target by preparing the full payload (email + other mandatory attributes).

we did a similar use case in the case of a web service for one of the target applications.

Thanks,  
@SivaLankapalli

---

<div class="post-metadata">

**Author:** ![RiyazuddinM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/riyazuddinm/32/21822_2.png) [@RiyazuddinM](https://developer.sailpoint.com/discuss/u/RiyazuddinM)\
**Post date:** [February 3, 2025, 6:13am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/4 "2025-02-03T06:13:10Z")

</div>

Hi @SuryenduB

> [@SuryenduB](#):
>
> ![image](https://global.discourse-cdn.com/sailpoint/original/3X/6/d/6d65ea0119f697a7b6f5526586d5dcccbd8cd47b.png)

As you have mentioned the boomHR in the target mappings.  
And as you said in the description.

> [@SuryenduB](#):
>
> ### The Issue:
> 
> - The **Update Account** operation is **not being called** when the email is generated in AD.
> - The writeback to BambooHR isn’t happening.

Did you enable the option in the refresh identity task configuration?

**Synchronize attributes**

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/3/9/394912ad638ff32e43bbceb5d75f90664324c9b7.png)

Since target mapping will be considered for the attribute sync

If you have missed enabling it,  
try and run the refresh identity task.  
And check whether the Update email operation is being called or not.

Thanks,  
@RiyazuddinM

---

<div class="post-metadata">

**Author:** ![aditprad003](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@aditprad003](https://developer.sailpoint.com/discuss/u/aditprad003)\
**Post date:** [February 3, 2025, 6:44am UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/5 "2025-02-03T06:44:00Z")

</div>

First , check if you can update email in bamboo HR using Postman ? If you have any specific doc which give details of updating user in Bamboo HR then please share.  
Second - Please add update provisioning policy email account attribute with email identity attribute  
then you already have target mapping and update operation.  
Run refresh with sync attribute option , you can run for one single user for which email is not updated. Then check if provisioning plan is generated ? is your update operation being called ( add some print statements to log file)?

---

<div class="post-metadata">

**Author:** ![SuryenduB](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SuryenduB](https://developer.sailpoint.com/discuss/u/SuryenduB)\
**Post date:** [February 7, 2025, 1:24pm UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/6 "2025-02-07T13:24:29Z")

</div>

> [@aditprad003](#):
>
> nd update operation.  
> Run refresh with sync attribute option , you can run for one single user for which email is not updated. Then check if provisioning plan is generated ? is your update operation being called ( add some print statements to log file)?

Thank you for all the helpful insights. I achieve this by adding a Lifecycle Event to detect Email Change , that triggers modify operation with Email as an attribute request

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 8, 2025, 1:25pm UTC](https://developer.sailpoint.com/discuss/t/help-needed-writing-back-email-from-on-prem-ad-to-webservice-connector-bamboohr/99644/7 "2025-04-08T13:25:28Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
