There are uncorrelated account in AD need to generate unique UPN, but UPN creation is failing to achieve uniqueness and it is due to not considering uncorrelated accounts
@lokeshreddy9122 Can you please specify the usecase and the current situation in a proper way.
Can you please let me know your current Create Account logic ? If you can provide the json then that would help.
In AD there are so many uncorrelated accounts, due to this UPN is failing due to no uniqueness check for uncorrelated accounts
do you have upn generator?
You can keep the samAccount name as the UPN value.
IN this case, use the unique value. SamAccountName is unique. This will not fail if you use samAccount instead of FirstName or LastName.
did not understand, you mean source config
In create account/provisioning policy check UPN Generator is there, am sure there will be as needed for create policy,
For that upn generator edit and inside attributes section add the following
“sourceCheck”: true
This change will check generator across uncorrelated accounts as well. Then uniqueness is guaranteed towards correlated and uncorrelated accounts.
Do you want to share your CREATE config so that we can better assist.
The ‘correlation’ state of accounts have no bearing on whether an account can be created or not.
OU sub-structure might if you are not looking in the entire tree. If the uncorrelated accounts are not visible to IDN, then that could prevent account creation