ADSI Connector Corelation issues.

[singh]

The ADSI import is not bringing Account to Entitlement correlation.

If I use this mapping, it is working as expected.

[name::samaccountname#String,

ACCOUNTID::distinguishedname#String,

displayname::cn#String,

comments::distinguishedname#String,

description::description#String,

validthrough::accountexpires#millisec,

updatedate::whenchanged#date,

lastpasswordchange::pwdlastset#millisec,

lastlogondate::lastlogon#millisec,

accountclass::objectclass#String,

customproperty1::samaccountname#String,

customproperty2::employeeid#String,

customproperty3::userprincipalname#String,

customproperty4::displayname#String,

customproperty6::objectguid#String,

customproperty7::givenname#String,

customproperty8::l#String,,

customproperty10::logoncount#String,

customproperty11::sn#String,

customproperty12::c#String,

customproperty13::company#String,

customproperty14::department#String,

customproperty15::countrycode#String,

customproperty16::employeeType#String,

customproperty17::homephone#String,

customproperty18::mobile#String,

customproperty19::useraccountcontrol#String,

customproperty20::manager#String,

customproperty21::mailnickname#String,

customproperty22::title#String,

customproperty23::streetaddress#String,

customproperty24::telephonenumber#String, 

customproperty25::st#String,

customproperty26::accountexpirationdate#date,

CustomProperty27::nspmdistributionpassword#String,

CustomProperty28::ipphone#String,

CustomProperty29::physicaldeliveryofficename#String,

CustomProperty30::primarytelexnumber#String,

CustomProperty33::msds-cloudextensionattribute7#String,

CustomProperty32::extensionattribute2#String,

CustomProperty31::proxyaddresses#String,

CustomProperty35::extensionattribute11#String,

CustomProperty37::initials#String,

CustomProperty38::otheripphone#String,

CustomProperty39::extensionattribute8#String,

CustomProperty40::msexchrecipientdisplaytype#String,

CustomProperty41::msexchrecipienttypedetails#String,

CustomProperty42::targetaddress#String,

CustomProperty43::msexchusagelocation#String,

CustomProperty46::lockouttime#millisec,

CUSTOMPROPERTY50::useraccountcontrol#number,

CustomProperty51::mail#String,

RECONCILATION_FIELD::name]



If the replace the mapping: It is not bringing the correlation
This is the mapping as per our current requirements

[NAME::samaccountname#String,

ACCOUNTID::objectguid#String,

DISPLAYNAME::cn#String,

COMMENTS::distinguishedname#String,

DESCRIPTION::description#String,

VALIDTHROUGH::accountexpires#millisec,

UPDATEDATE::whenchanged#date,

LASTPASSWORDCHANGE::pwdlastset#millisec,

LASTLOGONDATE::lastlogon#millisec,

ACCOUNTCLASS::objectclass#String,

CUSTOMPROPERTY1::c#String,

CUSTOMPROPERTY2::co#String,

CUSTOMPROPERTY3::department#String,

CUSTOMPROPERTY4::mail#String,

CUSTOMPROPERTY5::displayname#String,

CUSTOMPROPERTY6::employeeid#String,

CUSTOMPROPERTY7::extensionattribute1#String,

CUSTOMPROPERTY8::extensionattribute3#String,

CUSTOMPROPERTY9::extensionattribute7#String,

CUSTOMPROPERTY10::extensionattribute11#String,

CUSTOMPROPERTY11::extensionattribute12#String,

CUSTOMPROPERTY12::extensionattribute13#String,

CUSTOMPROPERTY13::extensionattribute14#String,

CUSTOMPROPERTY14::extensionattribute14#String,

CUSTOMPROPERTY15::manager#String,

CUSTOMPROPERTY16::sn#String,

CUSTOMPROPERTY17::st#String,

CUSTOMPROPERTY18::title#String,

CUSTOMPROPERTY19::userprincipalname#String,

CUSTOMPROPERTY20::othermailbox#String,

CUSTOMPROPERTY21::employeetype#String,

CUSTOMPROPERTY30::useraccountcontrol#String,

RECONCILATION_FIELD::ACCOUNTID]

[rushikeshvartak]

• RECONCILATION_FIELD is a unique property for an account, Ensure that it is always mapped to the Saviynt field mapping with ojectguid.

• Does Accounts have accountid ?
• Any errors in logs

[singh]

@rushikeshvartak 

Yes, the objectguid is present, and the job is also successful, and I didn't find any error in the logs.

[rushikeshvartak]

Please share logs

[stalluri · Accepted solution]

I have tried using this attribute mapping. It is working fine.

[name::samaccountname#String,
ACCOUNTID::distinguishedname#String,
displayname::cn#String,
comments::distinguishedname#String,
description::description#String,
validthrough::accountexpires#millisec,
updatedate::whenchanged#date,
lastpasswordchange::pwdlastset#millisec,
lastlogondate::lastlogon#millisec,
accountclass::objectclass#String,
customproperty6::objectguid#String,
customproperty7::givenname#String,
customproperty8::l#String,
customproperty9::financemanager#String,
customproperty10::userprincipalname#String,
customproperty11::sn#String,
customproperty12::c#String,
customproperty13::employeetype#String,
customproperty14::gapanumber#String,
customproperty20::manager#String,
customproperty21::mailnickname#String,
customproperty22::title#String,
customproperty25::st#String,
customproperty26::accountexpirationdate#date,
CustomProperty33::msds-cloudextensionattribute7#String,
CustomProperty32::extensionattribute2#String,
CustomProperty34::employeeid#String,
CustomProperty35::extensionattribute11#String,
CustomProperty36::managerid#String,
CustomProperty39::extensionattribute8#String,
CustomProperty44::extensionattribute1#String,
CustomProperty45::extensionattribute3#String,
CustomProperty46::lockouttime#millisec,
CustomProperty47::extensionattribute12#String,
CustomProperty48::extensionattribute13#String,
CustomProperty49::extensionattribute14#String,
CustomProperty50::useraccountcontrol#number,
CustomProperty51::mail#String,
CustomProperty52::extensionattribute15#String,
RECONCILATION_FIELD::customproperty6]


ADSI will only accept lowercase attributes  in the mapping.
customproperty16::employeeType#String,