11/03/2022
10:34 AM
- last edited on
11/03/2022
02:53 PM
by
Dave
Hi, here is a copy of our json createaccountjson for AD. When Saviynt creates the user in AD the name and displayname send the value as their username (sAMAccountName) instead of their first and last name.
Any idea of what else can be wrong, missing or need to be changed?
Thanks in advance
{
"accountExpires": "0",
"cn": "${cn}",
"department": "${user.departmentname}",
"displayname": "${user.firstname} ${user.lastname}",
"employeenumber": "${user.employeeid}",
"employeetype": "${user.employeeType}",
"givenName": "${user.firstname}",
"l": "${user.city}",
"mail": "${user.email}",
"name": "${user.firstname} ${user.lastname}",
"objectClass": [
"top",
"person",
"organizationalPerson",
"user"
],
"physicaldeliveryofficename": "${user.location}",
"pwdLastSet": "0",
"sAMAccountName": "${task.accountName}",
"sn": "${user.lastname}",
"streetAddress": "${user.street}",
"title": "${user.title}",
"userPrincipalName":"${task.accountName}@test.com",
"userAccountControl":"512",
"userPassword":"${randomPassword}",
"company":"${user.companyname}"
}
11/07/2022 07:33 AM
@JasBel You have mapped accountname to sAMAccountName. What do you want to update in sAMAccountName?
11/07/2022 08:56 AM
@vivekmohanty_pm thank you for the reply. sAMAccountName is alright it's only the name and displayname value that we need to have the first and last name but Saviynt keeps sending the value as the sAMAccountName instead of first and last name.
Would you have any clue?
Thank you in advance.
11/07/2022 11:12 AM - edited 11/07/2022 11:21 AM
11/07/2022 05:31 PM
@JasBel Just try what Rushikesh has suggested. And if possible share the create account debug logs. I can take a look at it.
11/08/2022 04:53 AM
Can you try with below mapping in createaccountjson
1. In Case the display name contains complete details try below
"name": "${user.displayname}",
2. In case not then :
"name": "${user.firstname.concat(' ').concat(user.lastname)}"
11/24/2022 04:39 AM
Hi, none of this worked. Even if I changed name to: "name": "${user.firstname.concat(' ').concat(user.lastname)}" we are still getting the sAMAccountName in the name field over AD.
Could this be coming from the ACCOUNTNAMERULE? Here is what we have there: CN=${task.accountName},CN=Users,DC=domain,DC=com
The task.accountName is what we use to create the sAMAccountName so if I change this for the first name and last name will it work you think?
Thank you again for your help with this.
11/24/2022 05:54 AM
You can change and try