ADSI Connector - How do you clear an AD attribute from UPDATEACCOUNTJSON

[Community_User]

Originally posted on January 26 2021 at 10:17 UTC

I am trying to clear an AD attribute on the UPDATEACCOUNTJSON on the ADSI connector, however I get a null reference exception in the Agent Logs.

I am using a piece of groovy for example:

map1.put("extensionAttribute11", user.customproperty10 == null ? '' : user.customproperty10);

However I noticed there is not a SUPPORTEMPTYSTRING section available on the ADSI connector.

Does anyone know how I can achieve this?

Thanks

Shaun

[Community_User]

Originally posted on January 26 2021 at 13:00 UTC

Hi Shaun,

You can set the SUPPORTEMPTYSTRING parameter as "FALSE" to make sure the data is being removed on your target AD (as specified in the documentation), in coordination with sending empty value through your connector (as example provided below using user's title).

${null!=user.title?user.title:''}

https://saviynt.freshdesk.com/support/solutions/articles/43000578581-active-directory-ad-connector-g...

Best,

Adrien.

[Community_User]

Originally posted on January 26 2021 at 13:04 UTC

Adrien,

sadly that setting does not exist on the ADSI connector, hence why I am asking the question, unless you know of a secret way to set it 🙂

Thanks anyway

[Community_User]

Originally posted on February 2 2021 at 10:47 UTC

UPDATE: It seems there was no way to clear AD attributes for the ADSI connector.

I had to get a patch from the engineering team for the ADSI agent on the agent web server to get this working

However NOTE if you get this patch, it only works if you set the attribute to null. It does not support using empty strings '' to clear attributes

[Community_User · Accepted solution]

Originally posted on February 2 2021 at 11:30 UTC

Thanks for the update Shaun.