Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

AD account import job fails without clear reason

KasperT
New Contributor III
New Contributor III

Hi, 

I have configured connection for Active Directory and trying to import accounts to Saviynt.

Connection is successful and I have checked all the configurations relating to importing. I could not find anything that would cause this.

Job is configured correctly and when I run it it gives me the error: Error - Importing AD Data :
Error-Getting-SearchResults -

I tried to look through Application logs as well but found nothing to help me.

Any idea what might cause this or am I missing something?

8 REPLIES 8

rushikeshvartak
All-Star
All-Star

It seems you have issue in object filter. Can you share logs & connection details


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

KasperT
New Contributor III
New Contributor III

This is the object filter used: (&(objectCategory=person)(objectClass=user))

Not sure which logs and connection details would be most helpful?

Import Logs


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

These logs should include the events. Time was 03.21 or 15.21.

sahajranajee
Saviynt Employee
Saviynt Employee

Hi @KasperT 

Could you share the account_attribute mapping for your AD/LDAP connector?


Regards,
Sahaj Ranajee
Sr. Product Specialist

KasperT
New Contributor III
New Contributor III

Hi, yes here is the account_attribute mapping:

[
CUSTOMPROPERTY1::physicalDeliveryOfficeName#String,
CUSTOMPROPERTY2::department#String,
CUSTOMPROPERTY3::extensionAttribute5#String,
CUSTOMPROPERTY4::employeeID#Binary,
CUSTOMPROPERTY5::extensionAttribute2#Number,
CUSTOMPROPERTY6::givenName#String,
CUSTOMPROPERTY7::initials#String,
CUSTOMPROPERTY8::middleName#String,
CUSTOMPROPERTY9::sn#String,
CUSTOMPROPERTY10::extensionAttribute3#Number,
CUSTOMPROPERTY11::extensionAttribute4#String,
CUSTOMPROPERTY12::title#String,
CUSTOMPROPERTY13::userPrincipalName#String,
DISPLAYNAME::displayname#String,
CUSTOMPROPERTY14::cn#String,
CUSTOMPROPERTY15::name#String,
NAME::sAMAccountname#String,
CUSTOMPROPERTY16::mail#String,
CUSTOMPROPERTY17::extensionAttribute1#String,
CUSTOMPROPERTY18::division#String,
CUSTOMPROPERTY19::company#String,
CUSTOMPROPERTY20::telephoneNumber#String,
CUSTOMPROPERTY21::mobile#String,
CUSTOMPROPERTY22::otherMobile#String,
CUSTOMPROPERTY23::manager#Binary,
CUSTOMPROPERTY24::objectGUID#Binary,
CUSTOMPROPERTY25::userAccountControl#String,
ACCOUNTID::distinguishedName#String,
ACCOUNTCLASS::objectClass#String,
STATUS::userAccountControl#Number,
UPDATEDATE::whenChanged#date,
CREATED_ON::whenCreated#date,
LASTPASSWORDCHANGE::pwdLastSet#millisec,
LASTLOGONDATE::lastLogonTimestamp#millisec,
DESCRIPTION::description#String,
CUSTOMPROPERTY26::distinguishedName#String,
RECONCILATION_FIELD::customproperty24
]

sahajranajee
Saviynt Employee
Saviynt Employee

Hi @KasperT ,

I see manager and employeeID being mapped as #Binary. Could you confirm its correct? if not, please change it to String and try.


Regards,
Sahaj Ranajee
Sr. Product Specialist

KasperT
New Contributor III
New Contributor III

Thank you @sahajranajee this helped to get the Job succeed.

Now I have issue where the import works and shows that 44 new accounts are imported but they are not visible in Saviynt. I am troubleshooting that at the moment.