# Salesforce error after patch upgrade

**URL:** <https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq\
**Created:** [June 24, 2024, 5:12pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255 "2024-06-24T17:12:59Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 24, 2024, 5:12pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/1 "2024-06-24T17:12:59Z")

</div>

### Which IIQ version are you inquiring about?

Version 8.2

### Share all details related to your problem, including any error messages you may have received.

Hi All  
We just upgraded our IdentityIQ from 8.2p2 to 8.2p6. Since then our leaver workflow is throwing errors for disabling Salesforce accounts where we set the profileid to “loginless”

The error is “Validation rule preventing activation of Loginless and ReadOnly users”. We did not have these errors with 8.2p2.

Has anybody seen similar error before? Any hint where to look?

Thanks.  
Pasha

---

<div class="post-metadata">

**Author:** ![vinnysail](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vinnysail/32/17001_2.png) [@vinnysail](https://developer.sailpoint.com/discuss/u/vinnysail)\
**Post date:** [June 24, 2024, 6:10pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/2 "2024-06-24T18:10:45Z")

</div>

Hi @pasha,  
Is this a salesforce error ? Please provide more details on the error  
Did you had a chat with salesforce app team to understand if this is at app end.

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 25, 2024, 1:29am UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/3 "2024-06-25T01:29:58Z")

</div>

Hi Vinod  
That IS salesforce error. The issue is we didn’t get the error when on 8.2p2. I’ve asked our salesforce team to look into it too.

---

<div class="post-metadata">

**Author:** ![vishal\_kejriwal1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vishal_kejriwal1/32/10904_2.png) [@vishal\_kejriwal1](https://developer.sailpoint.com/discuss/u/vishal_kejriwal1)\
**Post date:** [June 25, 2024, 2:13am UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/4 "2024-06-25T02:13:13Z")

</div>

I would suggest open sailpoint support ticket for this .

---

<div class="post-metadata">

**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\
**Post date:** [June 25, 2024, 7:42am UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/5 "2024-06-25T07:42:40Z")

</div>

Hi @vinnysail,

you can review the connectors documentations of p2 and p6 and check if it has any difference about Salesforce:

8.2p2  
[https://community.sailpoint.com/t5/IdentityIQ-Server-Software/IdentityIQ-8-2p2/ta-p/210684](https://community.sailpoint.com/t5/IdentityIQ-Server-Software/IdentityIQ-8-2p2/ta-p/210684)

8.2p6  
[https://community.sailpoint.com/t5/IdentityIQ-Server-Software/IdentityIQ-8-2p6/ta-p/247485](https://community.sailpoint.com/t5/IdentityIQ-Server-Software/IdentityIQ-8-2p6/ta-p/247485)

Also you can try to active the logs for salesforce connettor and if you dont find any solution open a ticket to SP, like @vishal_kejriwal1 says

---

<div class="post-metadata">

**Author:** ![vinnysail](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vinnysail/32/17001_2.png) [@vinnysail](https://developer.sailpoint.com/discuss/u/vinnysail)\
**Post date:** [June 25, 2024, 10:03am UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/6 "2024-06-25T10:03:46Z")

</div>

Thanks !! FYI to @pasha who posted the query on the same.

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 25, 2024, 1:09pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/7 "2024-06-25T13:09:26Z")

</div>

We have opened the case with Sailpoint support. Nothing yet. It’s quite strange that going from p2 to p6 could cause such errors.

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 26, 2024, 7:04pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/8 "2024-06-26T19:04:03Z")

</div>

Hi @vishal_kejriwal1 and @vinnysail and @enistriminsait

Support says I’m on my own ☹

The error is from Salesforce when I try to disable AND set profileid to loginless  
Is there way to make the connector to do the disable first then set the profileid?

Thanks.  
Pasha

---

<div class="post-metadata">

**Author:** ![vishal\_kejriwal1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vishal_kejriwal1/32/10904_2.png) [@vishal\_kejriwal1](https://developer.sailpoint.com/discuss/u/vishal_kejriwal1)\
**Post date:** [June 26, 2024, 7:11pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/9 "2024-06-26T19:11:27Z")

</div>

> [@pasha](#):
>
> Loginless and ReadOnly users

What is **Loginless** and **ReadOnly users**? are these separate profiles ?

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 26, 2024, 7:24pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/10 "2024-06-26T19:24:13Z")

</div>

Loginless is a profile so is ReadOnly.

Our salesforce team has this policy that the user has to be disabled before it can get Loginless. 8.2p2 did it in the right order. 8.2p6 connector does not ☹

---

<div class="post-metadata">

**Author:** ![vishal\_kejriwal1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vishal_kejriwal1/32/10904_2.png) [@vishal\_kejriwal1](https://developer.sailpoint.com/discuss/u/vishal_kejriwal1)\
**Post date:** [June 26, 2024, 7:26pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/11 "2024-06-26T19:26:50Z")

</div>

Salesforce application can have one profile at a time . it’s a single valued attribute .

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 26, 2024, 7:43pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/12 "2024-06-26T19:43:54Z")

</div>

I know. Active users have only one role which could be sales, marketing, …

When the user leaves the company I need to disable their account AND set their profile to be “Loginless”. I do that in the beforeprovisioning rule and 8.2p2 did the right thing. But 8.2p6 is not.  
Next reply has a sample plan that fails. 00eG000dfj0cLsDIAU is the profileid for “loginless”:

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [June 26, 2024, 7:46pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/14 "2024-06-26T19:46:51Z")

</div>

```auto
<ProvisioningPlan nativeIdentity="leaverperson@domain.com" targetIntegration="Salesforce" trackingId="c358a5895c094b43a55f024a0f5cbadc">
  <AccountRequest application="Salesforce" nativeIdentity="0056f0kfdl000Bg3vEAAR" op="Disable">
    <AttributeRequest name="ProfileId" op="Set" value="00eG000dfj0cLsDIAU"/>
  </AccountRequest>
  <Attributes>
    <Map>
      <entry key="identityRequestId" value="0000000251"/>
      <entry key="requester" value="somebody"/>
      <entry key="source" value="LCM"/>
    </Map>
  </Attributes>
  <Requesters>
    <Reference class="sailpoint.object.Identity" id="0a104d7987bc1d63818829a55db2723e" name="somebody"/>
  </Requesters>
</ProvisioningPlan>

```

---

<div class="post-metadata">

**Author:** ![pasha](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pasha/32/71_2.png) [@pasha](https://developer.sailpoint.com/discuss/u/pasha)\
**Post date:** [August 7, 2024, 3:54pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/15 "2024-08-07T15:54:04Z")

</div>

Just to update this case. The Salesforce connector has changed between 8.2p2 and 8.2p6. What used to be done in one call for setting the profileid and disable, now is done in two separate API calls.

I ended up changing my beforeprovisioning rule to add disable modify as a separate accountrequest first.

Thanks.  
Pasha

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [October 6, 2024, 3:54pm UTC](https://developer.sailpoint.com/discuss/t/salesforce-error-after-patch-upgrade/68255/16 "2024-10-06T15:54:30Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.