Hello everyone, so
Has anyone else had this error?
1 - I start aggregation in my source
2 - Aggregation finished
3 - RBAC should create the identity access in AD but the error occurs
Hello everyone, so
Has anyone else had this error?
1 - I start aggregation in my source
2 - Aggregation finished
3 - RBAC should create the identity access in AD but the error occurs
The error occurred specifically during the “Create Unique Account ID” operation
Common Causes for this Error:
Performance Issues on Connected System: The most common cause is that the target system is slow to respond to queries. SailPoint is trying to check if the nativeIdentity
it wants to use already exists, but the check is taking longer than 30 seconds.
Network Latency/Connectivity: Delays in network communication between your SailPoint ISC environment and the connected system can cause timeouts.
Resource Constraints in SailPoint: While less likely to be the primary cause for a timeout waiting for response, if your SailPoint is under severe resource pressure, it could contribute to delays in processing the uniqueness check.
Incorrect nativeIdentity
Logic: If the logic for generating the nativeIdentity
is complex or involves multiple lookups that are themselves slow, it could contribute to the overall timeout.
Excessive Data Volume: If the system is trying to process a very large number of uniqueness checks concurrently, it could overwhelm the target system.
Target System Locking/Contention: The target system might be experiencing locks or contention that prevent it from responding quickly to the uniqueness validation query.
@guilherme_sec Pls double check your account creation logic if you are ok, share with me to see the issue.
{
"name": "distinguishedName",
"transform": {
"type": "rule",
"attributes": {
"name": "Create Unique Account ID"
}
},
"attributes": {
"template": "CN=$(firstnameinitial)$(lastname)$(uniqueCounter),OU=JoinedOU,OU=eeOU,DC=ad,DC=abcd,DC=abcde",
"cloudMaxUniqueChecks": "50",
"cloudRequired": "true"
},
"isRequired": true,
"type": "string",
"isMultiValued": false
}