How to create a list in objectClass in create account section

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hey All,

How to create a list of values that we need to pass in object class attribute in target.

We want to pass person,top,XYZZPerson,XYZZResources. Can we simply pass like this in the below image.??

image
image1060Ă—580 21.6 KB

2

Hi @Apoorv0802 ,

I believe you are facing some issue with this? What error are you facing?

Also, please check that objectClass is declared as a Multi-valued attribute in the Account schema of the AD source.

image
image1332Ă—67 2.85 KB

If the attribute is declared as Multi-valued, the default delimiter is a comma (,). So if the attribute is declared as Multi-valued, ideally you should be able to set person,top,XYZZPerson,XYZZResources

Thanks,
Shailee

3

yes right shailee i am able to put it in comma seperated but still facing issue

image
image883Ă—511 19.3 KB

is it correct way ?

4

Can you share the account schema for objectClass?

5

image
image1396Ă—52 2.77 KB

6

Getting below errors :

Provisioning

sailpoint.connector.ConnectorException: [LDAP: error code 65 - 000020B4: UpdErr: DSID-0305150A, problem 6002 (OBJ_CLASS_VIOLATION), data 0 ],sailpoint.connector.ConnectorException: [LDAP: error code 65 - 000020B4: UpdErr: DSID-0305150A, problem 6002 (OBJ_CLASS_VIOLATION), data 0 ]

Provisioning

sailpoint.connector.ConnectorException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C0912F5, comment: Error in attribute conversion operation, data 0, v4563],sailpoint.connector.ConnectorException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C0912F5, comment: Error in attribute conversion operation, data 0, v4563]

7

You can check the following link : Best Practices: Provisioning Multi-Valued Attributes - Compass (sailpoint.com)

8

Hi @Apoorv0802 ,

Can you try to reorder the objectClass values as: top,person,XYZZPerson,XYZZResources?

Another things to check is schema documentation for your AD to ensure that the “XYZZPerson”, “XYZZResources” object class are defined and supported?

9

yes tried this i got errorbelow
Provisioning

sailpoint.connector.ObjectNotFoundException: 2031662650 Found object matching dn, but had a different type then was requested.

10

Hi @Apoorv0802 ,

Are you using the below json in your policy?

{
 "attributes": {
   "cloudDelimiter": ","
},
 "isRequired": false,
 "isMultiValued": true,
 "name": "objectClass",
 "transform": {
   "attributes": {
     "value": "Person,top,XYZZPerson,XYZZResources"
  },
   "type": "static"
},
 "type": "string"
}

Have you assigned isMultiValued as true?

11

yes i did the same but still i am having issue and getting error while provisioning?

12

Have you got the same error?

13

yes along with this i got 2 more error at different times :

yes and along with that
Getting below errors :

Provisioning

sailpoint.connector.ConnectorException: [LDAP: error code 65 - 000020B4: UpdErr: DSID-0305150A, problem 6002 (OBJ_CLASS_VIOLATION), data 0 ],sailpoint.connector.ConnectorException: [LDAP: error code 65 - 000020B4: UpdErr: DSID-0305150A, problem 6002 (OBJ_CLASS_VIOLATION), data 0 ]

Provisioning

sailpoint.connector.ConnectorException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C0912F5, comment: Error in attribute conversion operation, data 0, v4563],sailpoint.connector.ConnectorException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C0912F5, comment: Error in attribute conversion operation, data 0, v4563]

14

So, I think you can create a Support ticket for this problem. As, there is no errors found in policy too.