Account Name Creation for 19 characters

[Srh2306]

Account Name Rule:

We are restricting to only 19 characters from the systemusername to create the Samaccountname for AD application by the below configuration at endpoint level, however it's not working in the new 24.4 version. It worked well on 23.10.

saMAccountName:"${user.systemUserName}"

In 24.4 version we are getting below error on AD provisioning - Error while creating account in AD - [LDAP: error code 80 - 00000523: SysErr: DSID-031A1242, problem 22 (Invalid argument), data 0 ]

No error as such were seen in 23.10 and account got created as expected.

Any workaround to achieve this use case?

[rushikeshvartak]

• Use advanced query LEFT(systemusername, 19)

[Srh2306]

Getting same error still with below configuration.

[rushikeshvartak]

Try with new account. and check on Step 2 before submitting request itself

[Srh2306]

Unfortunately, I still see the same error message, tried with new user as well. Account name is getting limited to 19 character but provisioning error is seen.

Error while creating account in AD - [LDAP: error code 80 - 00000523: SysErr: DSID-031A1242, problem 22 (Invalid argument), data 0 ]

[rushikeshvartak]

The error code [LDAP: error code 80 - 00000523: SysErr: DSID-031A1242, problem 22 (Invalid argument), data 0] typically indicates that there is an issue with one or more attributes being provided during the account creation process in Active Directory (AD). This can happen due to several reasons, such as invalid characters, attribute constraints, or missing required attributes.

Validate create Account JSON

[NM]

Hi @Srh2306 , share you create account json 

[achoudhury]

Hi,

Please find the below create account JSON-

{
saMAccountName:"${user.systemUserName}",
displayname:"${user.displayname}",
mail:"${user.email}",
sn:"${user.lastname}",
streetAddress:"${user.street}",
l:"${user.location}",
st:"${user.state}",
co:"${user.country}",
postalCode:"${user.regioncode}",
company:"***********",
title:"${user.title}",
manager:"${user.customproperty8}",
department:"${user.departmentname}",
departmentNumber:"${user.departmentNumber}",
description:"${user.customproperty1==null?('N'+user.username):('E'+user.username)}",
extensionAttribute4:"${if(user?.customproperty1.equals()){'N'}else{'E'}}",
employeeID:"${user.username}",
objectClass:["top","person","organizationalPerson","user"],
userPrincipalName:"${user.email}",
extensionAttribute1:"${user.username}",
extensionAttribute3:"${user?.startdate.format("yyyy/MM/dd")}",
employeeType:"${if(user?.customproperty1.equals()){(user.customproperty2)}else{(user.customproperty1)}}",
givenName:"${user.preferedFirstName}",
physicalDeliveryOfficeName:"${user.location} ${user.state}",
street:"${user.street}",
pwdLastSet:"0",
businessCategory:"******",
l:"${user.location}",
localeID:"${user.locationnumber}",
mailNickname:"${user?.email.replace('.','').replace('@','')}",
msExchExtensionAttribute16:"${user.systemUserName}@************.NET",
msExchExtensionAttribute19:"${user.systemUserName}@**********"
}

[rushikeshvartak]

Does all attributes are not null for user requested ?

{
  "saMAccountName": "${user.systemUserName}",
  "displayname": "${user.displayname}",
  "mail": "${user.email}",
  "sn": "${user.lastname}",
  "streetAddress": "${user.street}",
  "l": "${user.location}",
  "st": "${user.state}",
  "co": "${user.country}",
  "postalCode": "${user.regioncode}",
  "company": "********",
  "title": "${user.title}",
  "manager": "${user.customproperty8}",
  "department": "${user.departmentname}",
  "departmentNumber": "${user.departmentNumber}",
  "description": "${user.customproperty1 == null ? ('N' + user.username) : ('E' + user.username)}",
  "extensionAttribute4": "${user.customproperty1 == null ? 'N' : 'E'}",
  "employeeID": "${user.username}",
  "objectClass": ["top", "person", "organizationalPerson", "user"],
  "userPrincipalName": "${user.email}",
  "extensionAttribute1": "${user.username}",
  "extensionAttribute3": "${user.startdate != null ? user.startdate.format('yyyy/MM/dd') : ''}",
  "employeeType": "${user.customproperty1 == null ? (user.customproperty2) : (user.customproperty1)}",
  "givenName": "${user.preferedFirstName}",
  "physicalDeliveryOfficeName": "${user.location} ${user.state}",
  "street": "${user.street}",
  "pwdLastSet": "0",
  "businessCategory": "******",
  "l": "${user.location}",
  "localeID": "${user.locationnumber}",
  "mailNickname": "${user.email.replace('.', '').replace('@', '')}",
  "msExchExtensionAttribute16": "${user.systemUserName}@************.NET",
  "msExchExtensionAttribute19": "${user.systemUserName}@**********"
}

[This post has been edited by a Moderator to remove sensitive information.]

[Srh2306]

Yes, no fields are null. Also account creation works as expected where systemusername is less than 19 characters, so doesnt seem to be an issue with create accountJSOn.

[rushikeshvartak]

saMAccountName:"${accountName}",