Issue with Account Move in AD

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello, I am getting an error as shown below when I am trying to execute the BeforeProvisioning rule while doing account move from one OU to another. I am not sure what could be the issue as I have all the null check.

[“RuleExecutionException (ruleName\u003dTest AD BeforeProvisioning): BSFException: BeanShell script error: Sourced file: inline evaluation of: \timport sailpoint.object.Identity; \timport sailpoint.object.ProvisioningPlan; \t . . . \u0027\u0027 unknown error: null : at Line: 13 : in file: inline evaluation of: \timport sailpoint.object.Identity; \timport sailpoint.object.ProvisioningPlan; \t . . . \u0027\u0027 : try { \n BSF info: Test AD BeforeProvisioning at line: 0 column: columnNo, caused by org.apache.bsf.BSFException: BeanShell script error: Sourced file: inline evaluation of: \timport sailpoint.object.Identity; \timport sailpoint.object.ProvisioningPlan; \t . . . \u0027\u0027 unknown error: null : at Line: 13 : in file: inline evaluation of: \timport sailpoint.object.Identity; \timport sailpoint.object.ProvisioningPlan; \t . . . \u0027\u0027 : try { \n BSF info: Test AD BeforeProvisioning at line: 0 column: columnNo”]

2

Hello @ankase

Welcome to the community :tada:

Can you share your code here ?
It is null value exception , as per error details , sometimes we miss to identify them.

3

Test AD Provisioning Rule.txt (3.7 KB)

4

Try this once
bpRule.txt (5.0 KB)

1 Like
5

Seems some other issue which is not identifiable, I am still getting the same error.

6

Hi Anuj,
Can you describe what you’re trying to accomplish in this rule? From what I can see, you’re trying to select the OU for the user and modify a few attributes. What I’m seeing in here can realistically be done with transforms and then using the Services Standard Before Provisioning Rule. It will make it less work for your team over time if you don’t need to maintain this rule for operations you can accomplish with other methods

7

@ankase update below line and try hope it will help

accountRequest.add(new AttributeRequest("AC_NewParent", ProvisioningPlan.Operation.Add, newOU));

to

accountRequest.add(new AttributeRequest("AC_NewParent", ProvisioningPlan.Operation.Set, newOU));
2 Likes
8

There are certain validations which we need to do before changing the OU of a user, so doing those validations. I had AAA session with SailPoint and they suggested that in this scenario Services Standard Before Provisioning Rule cant be used as those are usually used as is or very minor changes.

9

I have already tried that but still getting same error.

10

get rid of the log.error line

11

I put it as we wanted to understand if there is issue with the rule at any place and after suggestion from SailPoint. But these lines doesn’t seem to be issue but issue lies somewhere else which we are not able to figure out

12

Hi @ankase,

Could you please share the latest version of the rule currently attached to your source?

Thanks

13

Test AD BeforeProvRule.xml (2.5 KB)

14

Thanks for sharing the rule. Are you still encountering the same error, or is it a different one this time

15

Error is same just that line number is different this time.

16

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.