Issue With AD Account Aggregation

Hello Everyone,

I have onboarded the AD application, and the configuration is working fine there is an issue with the account aggregation. After running the aggregation i can see only some accounts that are aggregated. I have other OU and users in the AD those also i need to aggregate to the IIQ. Is there additional thing i need do? Attached snapshot for your reference.

Hi Shubham,

Please check your active directory configuration, go to account and in the user search scope, list all the ou from where you want to bring the accounts in Sailpoint iiq. Once done, re-run the aggregation again, it should bring all your users.

Hi @Gutte_Shubham

Login to IIQ.

Navigate to the Applications → Application Definition.

Open the AD application.

Navigate to Configuration tab. Under Account section, add the Search DN values from where you want to aggregate the identites like the screenshot below.

Hi @msingh900 and @naveenkumar3

The required OU has been added and accounts are aggregated successfully. Thank you for your help.

One more thing i have noticed the tomcat is taking long time to load the page show the things. It is because of the memory ? or do i need to clear any catch file?
But i can see the host status in the green.

just see, if any of the task is running from long which is taking lot of memory and usage. if any task is stuck, remove the task, go to debug and got to memory , clear the memory. It should improve the performance.

The below items you can check in your env:

  1. Task running status from Administrative Console under Gear Icon.
  2. Server statistics when you run the aggregation of AD.
  3. Clear the cache from debug page.

Thanks