We are observing an intermittent issue in production - Add access task is failing with below error whenever user tries to modify the Inactive account of any AD logical application.
Error while ADD operation for account-[name]to Group-[XXXX] - [LDAP: error code 53 - 0000054F: SvcErr: DSID-031A126A, problem 5003 (WILL_NOT_PERFORM), data 0 ]
I referred below forum discussions but our case is different
We have a working SSL connection and we dont have any ADDAccess JSOn or config in connection to check attributes. Could not replicate the issue in lower environment too. Its working fine in stage and dev
Kindly suggest if any resolution for this issue.
You stated "whenever user tries to modify the Inactive account of any AD logical application"
By "modify" are you updating the AD account attributes? If so then you can check the attribute mapping in your updateaccountJSON
Or if by "modify" you mean you are trying to add/remove a group membership then you are correct there is not a addAccessJSON for that. What you can do is compare a User which is working (no LDAP error code) for the same group as a User which is not working.
LDAP error "code 53 - 0000054F" contains two parts. The 'code 53' is the error reference and translates to 'server is unwilling to perform'. The '0000054F' is the system code and I believe that translation can be found here as '0X54F':
Which is "ERROR_INTERNAL_ERROR" and not a very helpful description. If you don't have anyone from the AD team to help you investigate, I suggest comparing the Saviynt data for a positive/negative outcome and see if you can find any significant differences.