I am getting error while AD provisioning . i can see the account got created but it says some attributes are not updated properly

Hye Guys,

I am able to create AD account but it is completing with Error please refer below screenshot and let me know how to troubleshoot . Even attribute sync is not working even after enabling it for attributes that i want to sync.

Hi @Rakesh_Singh_1234,
Thank you for the post. Could you please go to Search → Search the user → Account Activity → Share the details from that page what all attributes you are sending. Once done we might figure out what is the issue?

@RAKGDS

Hi @Rakesh_Singh_1234,
Can you please remove “user cant change pwd” and “pwd never expire” for Create Account. Test Create User again and let us know

Hi @Rakesh_Singh_1234,

I believe your UPN should follow an xyz@ format and that could be causing the issue.

hey thnaks @RAKGDS it worked :grinning_face_with_smiling_eyes: but may i know what is the reason behind disabling those pwd attributes in create ad (prov policy) ??

Hi Rakesh,
Thank you for the confirmation. They way you have added that in Create Policy is not the right way. You need to go to Active Directory → Attribute Editor and see what is the name in there and take that name and add it here it should work.

Thanks
Rakesh Bhati

@RAKGDS just have one more query i am curious that why we implement NERM with sailpoint if we can use fieldglass or workday for contractors any idea on this ?

hey @RAKGDS it was wokring fine initially but the same problem again coming any idea ? intiially i disabled the attributes u said and it was successfully created in AD but again same error some attribues not updated