Few sources show some entitlement Names as the dn rather than the SAMAccountName.
How can we fix this?
Have you run an entitlement aggregation yet?
The other thing you want to check is to make sure that your group aggregation settings contain the OU that those groups are in.
NO, we havent run any aggregation
Ok, start with running an entitlement aggregation and see if that resolves your issue.
If that doesn’t resolve your issue, then click on edit configruation, go to account and group settings, then add the needed OUs to the group search scope at the bottom of that page.
After adding OUs can we see the Entitlements Name instead of OUs name
We are able to see only "Cn= " values instead of names
Hi Mekala, this happens when users have groups that are not in the group base dn/search filter.
For example, if you already did not trigger an entitlement aggregation, but you perform an account aggregation, groups hold by users will populate entitlement list. As aggregation only reads memberOf attribute, which have a DN value type, they will appear as you are seeing.
If you run entitlement aggregation, the groups thar are under your base DN (for example, ou=groups,…,dc=domain,dc=com) will appear with the CN value as their name. But if users aggregated has other groups, for example the cn=domain users,cn=users,dc=domain,dc=com, will appear as DN.
Perhaps you should perform a cleanup of the aggregated objects (this is a call on the private api, I am not sure if it is already moved to beta or v3 api), it will reset to 0 any aggregation you performed, then first do the entitlement aggregation and next, the account aggregation.
we have only V3 and beta i am unabe to see above option in those APIs
Hi Mekala, here are the calls. First one is to search sources, because id for private calls are not the same as the id returned in beta/v3. Authoritazion is like beta/v4 apis, so you can clone some call and modify urls.
Find your source id with this calll:
GET https://{{tenant}}.api.identitynow.com/cc/api/source/list
For resetting aggregated objects, use id returned in last call here:
POST https://{{tenant}}.api.identitynow.com/cc/api/source/reset/{id}
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.