ADSI Search Filter causes duplicate accounts to be created

[sdey_2023]

Hi Team,

We have 4 (3 child, 1 parent) different domains specified as follows in the search filter of ADSI connection:

DC=saviyntlabs,DC=org###DC=child1,DC=saviyntlabs,DC=org###DC=child1=2,DC=saviyntlabs,DC=org###DC=child3,DC=saviyntlabs,DC=org

but when we are running the import, a duplicate account is getting created for all the Inactive accounts in child1 domain in this format - "accountname : XYZ-Deleted on 12-05-2023 12:27, status: Suspended from Import Service".

Is this issue happening as during import Saviynt is unable to find a corresponding account to link to in the parent domain - DC=Saviyntlabs?

Could you please confirm the right way to specify the search filter so that this issue doesn't happen.

[sahil]

Can you share the ACCOUNT_ATTRIBUTE you have defined in Connection. 

[sangitaladi]

[CUSTOMPROPERTY1::cn#String, CUSTOMPROPERTY2::useraccountcontrol#String, STATUS::useraccountcontrol#String, CUSTOMPROPERTY3::userprincipalname#String, CUSTOMPROPERTY4::mailnickname#String, LASTLOGONDATE::lastlogon#millisec, DISPLAYNAME::displayname#String, CUSTOMPROPERTY5::company#String, CUSTOMPROPERTY6::department#String, CUSTOMPROPERTY7::sn#String, COMMENTS::distinguishedname#String, CUSTOMPROPERTY8::homedirectory#String, LASTPASSWORDCHANGE::pwdlastset#millisec, CUSTOMPROPERTY9::co#String, CUSTOMPROPERTY10::employeetype#String, CUSTOMPROPERTY11::givenname#String, CUSTOMPROPERTY12::title#String, CUSTOMPROPERTY13::personaltitle#String, CUSTOMPROPERTY14::c#String, DESCRIPTION::description#String, VALIDTHROUGH::accountexpires#millisec, CUSTOMPROPERTY16::logoncount#String, CUSTOMPROPERTY17::physicaldeliveryofficename#String, UPDATEDATE::whenchanged#date, CUSTOMPROPERTY18::name#String, CUSTOMPROPERTY19::streetaddress#String, CUSTOMPROPERTY20::mail#String, CUSTOMPROPERTY21::employeeid#String, CUSTOMPROPERTY22::countrycode#String, NAME::samaccountname#String, CUSTOMPROPERTY23::manager#String, CUSTOMPROPERTY24::division#String, CUSTOMPROPERTY25::mobile#String, CREATED_ON::whencreated#date, ACCOUNTCLASS::objectclass#String, ACCOUNTID::distinguishedname#String, CUSTOMPROPERTY27::objectsid#String, CUSTOMPROPERTY28::objectguid#String, CUSTOMPROPERTY29::st#String, CUSTOMPROPERTY30::l#String, CUSTOMPROPERTY15::postalcode#String, CUSTOMPROPERTY31::proxyaddresses#String, CUSTOMPROPERTY32::street#String, CUSTOMPROPERTY33::telephonenumber#String, CUSTOMPROPERTY34::extensionAttribute12#String, UPDATEDATE::whenchanged#date, RECONCILATION_FIELD::CUSTOMPROPERTY28]

[sahil]

Can you update the search filter to only include the child1 domain and run the import. Lets check the logs post that to understand why the deleted accounts are gettign created.