Update AD Account attributes using API through forms and workflows

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,

Do we have any API for updating the AD account attributes like “accountExpires”.? as we can do it through Attribute Synchronization, but here we have a requirement to update this attribute based on required basis manually through forms and workflows.

Any suggestions or approaches appreciate.

Thanks

2

Hi @PrashRV

In ISC you can not do directly with an API call to “set an AD attribute.” The Update Account API is for correlation (identityId / manuallyCorrelated), and attribute updates are only supported for flat-file sources, not AD. If you need to change accountExpires in AD, you have two supported paths:

Use Attribute Sync which is recommended map accountExpires to an identity attribute in the AD Create Profile, then drive that identity attribute from an authoritative/override source. When the identity attribute changes, Attribute Sync pushes it to AD.

Do it outside ISC: from a workflow, call your own service (Graph/LDAP/PowerShell) via HTTP and update AD there. ISC won’t natively “patch” arbitrary AD attributes via its Accounts API.

You may like also to check the following source for more details as well as it gives more info

2 Likes
3

Hi @PrashRV

Would you please mark it as solution if that satisify your needs

Thanks

4

Hi @amrdodani,

Thanks for the reply,

Yes, I have a requirement to update user attributes through forms and workflows as the user data is not maintained through the source, so I am looking to manage it through forms and eventually looking for the suggestions.

sure, will do mark it.

Thanks

5

There isn’t a direct API or workflow action to update AD account attributes like accountExpires in IdentityIQ/ISC. The workaround is using an intermediate delimited file connector: update the file via workflow, then sync changes to AD through attribute synchronization (discussion here). Direct connectors don’t support account updates from workflows, and identity attributes can’t be modified via workflows either.

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.