Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Active Directory Account Name best practice

SoumyaB
New Contributor
New Contributor

Hi Team,

We need to provision AD accounts in different OUs based on various conditions. The number of conditions might exceed 100.

We require information on the potential performance impact due to multiple conditions and would appreciate best practices for implementing account name rule conditioning.

 

Thanks and regards,

Soumya

 

3 REPLIES 3

pmahalle
All-Star
All-Star

Hi @SoumyaB ,

Use Advanced config query rather than basic config in your endpoint account name rule where you can provide multiple condtions.


Pandharinath Mahalle(Paddy)
If this reply helps your question, please consider selecting Accept As Solution and hit Kudos 🙂

Thank you for response.

My query is related to ACCOUNTNAMERULE in AD Connector where we specify the Rules to generate the DN for the Account for provisioning

@SoumyaB ,

Then best approach would be OOTB as usual multiple rules separated by ### like below

CN=${user.lastname}\\, ${user.firstname} (Global-V)
[${user.username}],CN=Users,DC=abccompany,DC=com###CN=${user.lastname}1\\,
${user.firstname}1 (Global-V)
[${user.username}1],CN=Users,DC=abccompany,DC=com###CN=${user.lastname}\\,
${user.firstname} (Global-V) [${user.username}2],CN=Users,DC=abccompany,DC=com

Refer:

https://docs.saviyntcloud.com/bundle/AD-v23x/page/Content/Configuring-the-Integration-for-Provisioni...


Pandharinath Mahalle(Paddy)
If this reply helps your question, please consider selecting Accept As Solution and hit Kudos 🙂