# Update AD Account Attributes Through SailPoint Workflows

**URL:** <https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [April 21, 2025, 5:29pm UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857 "2025-04-21T17:29:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![UjjwalJain](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ujjwaljain/32/24704_2.png) [@UjjwalJain](https://developer.sailpoint.com/discuss/u/UjjwalJain)\
**Post date:** [April 21, 2025, 5:29pm UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857/1 "2025-04-21T17:29:40Z")

</div>

We are exploring the capability to update the ‘account expiration’ attribute on Active Directory (AD) for a user based on input collected through SailPoint Forms. However, we’ve encountered a challenge: there doesn’t appear to be a direct method to modify AD account attributes via workflows.

As a potential workaround, we considered updating an identity attribute and leveraging attribute synchronization to push the change to AD. Unfortunately, SailPoint currently does not support direct identity attribute updates via workflows either.

Given these limitations, we would like to understand:

- Is there a supported method to update account-level attributes in AD through workflows?
- Alternatively, is it feasible to update an identity attribute in a way that allows it to be synchronized to the corresponding AD account attribute?

If anyone has encountered a similar use case or has suggestions or alternative approaches to achieve this in SailPoint Identity Security Cloud, we would greatly appreciate your input.

---

<div class="post-metadata">

**Author:** ![Abhinov7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/abhinov7/32/13253_2.png) [@Abhinov7](https://developer.sailpoint.com/discuss/u/Abhinov7)\
**Post date:** [April 23, 2025, 6:13am UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857/2 "2025-04-23T06:13:08Z")

</div>

Hi,

For direct connectors you cannot do update account from workflows. And as you mentioned we cannot update identity attributes as well.

One workaround I can think of is create an intermediate delimited file with minimal account attributes. And for these delimited connector you can trigger update account from workflow.

-Abhinov

---

<div class="post-metadata">

**Author:** ![UjjwalJain](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ujjwaljain/32/24704_2.png) [@UjjwalJain](https://developer.sailpoint.com/discuss/u/UjjwalJain)\
**Post date:** [April 23, 2025, 9:09am UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857/3 "2025-04-23T09:09:31Z")

</div>

Hi Abhinav,

Thank you for the suggestion, we actually considered a similar approach using an intermediate delimited file connector to work around the limitation.

That said, we were hoping to explore if there are any alternative methods to achieve this before going down that path. If it turns out that this is the only viable option, then yes, the delimited file connector might end up being our fallback solution.

Appreciate your input!

---

<div class="post-metadata">

**Author:** ![Abhinov7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/abhinov7/32/13253_2.png) [@Abhinov7](https://developer.sailpoint.com/discuss/u/Abhinov7)\
**Post date:** [April 23, 2025, 9:30am UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857/4 "2025-04-23T09:30:10Z")

</div>

Hi,

Yes its the only option I can think of. Its because we cannot store intermediate data in any attribute of ISC.

-Abhinov

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 22, 2025, 9:30am UTC](https://developer.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/113857/5 "2025-06-22T09:30:26Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.