Update AD Account attributes using API through forms and workflows

Hi @PrashRV

In ISC you can not do directly with an API call to “set an AD attribute.” The Update Account API is for correlation (identityId / manuallyCorrelated), and attribute updates are only supported for flat-file sources, not AD. If you need to change accountExpires in AD, you have two supported paths:

Use Attribute Sync which is recommended map accountExpires to an identity attribute in the AD Create Profile, then drive that identity attribute from an authoritative/override source. When the identity attribute changes, Attribute Sync pushes it to AD.

Do it outside ISC: from a workflow, call your own service (Graph/LDAP/PowerShell) via HTTP and update AD there. ISC won’t natively “patch” arbitrary AD attributes via its Accounts API.

You may like also to check the following source for more details as well as it gives more info

2 Likes