Issue in Exchange Provisioning

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We have multiple domain controllers and all of them we have configured in domain and Exchange settings. The issue which happens during Exchange provisioning is that AD account is created on one dc but when IQ service tries to use get account - it appears to not replicated to other domain controllers and exchange prov fails. 2 options i see:

  1. use only 1 dc in domain and exchange settings.
  2. IIQ has createAccountTimeLag one attribute in app xml which can delay the get account , but i dont see anything like this in IDN. Does anyone find this attribute or similar attribute

Please suggest possible solution . TIA.

image

2

Hi, according to support KB article: - [IdentityNow] Error during account aggregation in GSuite source - 409 Error - Entity already exists - Customer Support
You should be able to set the same attribute in IDN, see the link how to do it. Hope it works, otherwise I dont know any other solution that your first suggestion.

Regards

3

Thanks Jesper.
Is there any specific exchange module to be deployed on IQ service for exchange provisioning ?

4

Not that I know of. However, I have seen the requirement for the service account that is used by IQService to have “Exchange Recipient Management” group membership.

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.