How can I sync an Identity's manager attribute back to Active Directory?

[baoussounda (Ousmane N'DIAYE)]

Hello @ReyG

This post from one of Sailpoint Team member : Active Directory: Attribute Sync for the Manager Attribute - Identity Security Cloud (ISC) / ISC Community Knowledge Base - SailPoint Developer Community

Explain how to sync the manager in AD, like you should :

• Step 1 : create an Identity Attribute in your Identity Profile called distingushed Name which retrieve the DIstinguished name from AD for all identities :

  

• Step 2 : create a second Identity attribute called for example “AD Manager Distingushed Name” which will copy each Identity Manager AD DN from the first Identity Attribute :

This second Identity Attribute should be associated with the following transform to add in your tenant :

{
    "attributes": {
        "attributeName": "distinguishedName",
        "name": "Cloud Services Deployment Utility",
        "operation": "getReferenceIdentityAttribute",
        "uid": "manager"
    },
    "name": "Determine Manager DN",
    "type": "rule"
}

• Step 3 : Ran aggregations, process Identity profile to populate this new attributes and check that the manager DN is copied in the new Attribute.
• Step 4: And then in your Active Directory source you can sync the manager attribute with your new identity attribute “AD Manager Distingushed Name”