8.4p1
I am working on creating a new AD account (secondary Application Link) on an identity. I was able to get the account created by provisioning an AD group from that domain, but every request is “failing” because it is unable to update attributes.
I have a provisioning policy set up which returns the FirstName, LastName, and Description with the following logic: return identity.getFirstname();
Is there a different way I need to configure this?
Are you sending the password value also through the provisioning policy? Please check and let me know.
Yes I do have the password configured in the provisioning policy
Check if the password that you are generating or setting in AD at the time of account creation is as per the password policy of AD.
Also if you can share the exact logs that you are getting, then it would be helpful to troubleshoot the issue.
What is the error you are getting while provisioning?? are you trying to create the secondary account also in the same domain?? if yes, it will give you an error. Are you getting constraint violation error?? If not can you please share the error ??
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.