Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

ADSI Search Filter causes duplicate accounts to be created

sdey_2023
Regular Contributor
Regular Contributor

Hi Team,

We have 4 (3 child, 1 parent) different domains specified as follows in the search filter of ADSI connection:

DC=saviyntlabs,DC=org###DC=child1,DC=saviyntlabs,DC=org###DC=child1=2,DC=saviyntlabs,DC=org###DC=child3,DC=saviyntlabs,DC=org

but when we are running the import, a duplicate account is getting created for all the Inactive accounts in child1 domain in this format - "accountname : XYZ-Deleted on 12-05-2023 12:27, status: Suspended from Import Service".

Is this issue happening as during import Saviynt is unable to find a corresponding account to link to in the parent domain - DC=Saviyntlabs?

Could you please confirm the right way to specify the search filter so that this issue doesn't happen.

3 REPLIES 3

SB
Saviynt Employee
Saviynt Employee

Can you share the ACCOUNT_ATTRIBUTE you have defined in Connection. 


Regards,
Sahil

sangitaladi
Regular Contributor
Regular Contributor

[CUSTOMPROPERTY1::cn#String, CUSTOMPROPERTY2::useraccountcontrol#String, STATUS::useraccountcontrol#String, CUSTOMPROPERTY3::userprincipalname#String, CUSTOMPROPERTY4::mailnickname#String, LASTLOGONDATE::lastlogon#millisec, DISPLAYNAME::displayname#String, CUSTOMPROPERTY5::company#String, CUSTOMPROPERTY6::department#String, CUSTOMPROPERTY7::sn#String, COMMENTS::distinguishedname#String, CUSTOMPROPERTY8::homedirectory#String, LASTPASSWORDCHANGE::pwdlastset#millisec, CUSTOMPROPERTY9::co#String, CUSTOMPROPERTY10::employeetype#String, CUSTOMPROPERTY11::givenname#String, CUSTOMPROPERTY12::title#String, CUSTOMPROPERTY13::personaltitle#String, CUSTOMPROPERTY14::c#String, DESCRIPTION::description#String, VALIDTHROUGH::accountexpires#millisec, CUSTOMPROPERTY16::logoncount#String, CUSTOMPROPERTY17::physicaldeliveryofficename#String, UPDATEDATE::whenchanged#date, CUSTOMPROPERTY18::name#String, CUSTOMPROPERTY19::streetaddress#String, CUSTOMPROPERTY20::mail#String, CUSTOMPROPERTY21::employeeid#String, CUSTOMPROPERTY22::countrycode#String, NAME::samaccountname#String, CUSTOMPROPERTY23::manager#String, CUSTOMPROPERTY24::division#String, CUSTOMPROPERTY25::mobile#String, CREATED_ON::whencreated#date, ACCOUNTCLASS::objectclass#String, ACCOUNTID::distinguishedname#String, CUSTOMPROPERTY27::objectsid#String, CUSTOMPROPERTY28::objectguid#String, CUSTOMPROPERTY29::st#String, CUSTOMPROPERTY30::l#String, CUSTOMPROPERTY15::postalcode#String, CUSTOMPROPERTY31::proxyaddresses#String, CUSTOMPROPERTY32::street#String, CUSTOMPROPERTY33::telephonenumber#String, CUSTOMPROPERTY34::extensionAttribute12#String, UPDATEDATE::whenchanged#date, RECONCILATION_FIELD::CUSTOMPROPERTY28]

SB
Saviynt Employee
Saviynt Employee

Can you update the search filter to only include the child1 domain and run the import. Lets check the logs post that to understand why the deleted accounts are gettign created.


Regards,
Sahil