CHECKFORUNIQUE/ACCOUNTNAMERULE causes issue while evaluating the rules for AD

[BalajiEpari]

Hi Team,

We are integrating Saviynt with AD, we are getting issue which creating a user account by incrementing the CN value if the same CN value exists.

To evaluate the uniqueness of CN value we defined below rule in CHECKFORUNIQUE.

{"cn": "${user.firstname + ' ' + user.lastname}###${user.firstname + ' ' + user.lastname}1"}

ACCOUNTNAMERULE:

CN=${user.firstname + ' ' + user.lastname},${DynBaseDN}###CN=${user.firstname + ' ' + user.lastname}1,${DynBaseDN}

Error:

In AD, only user with CN=Gopal Tiwari exists. but while we are trying to provision, we are getting ENTRY_EXISTS.

Can someone pls suggest.

Regards,

Balaji Epari

[pmahalle]

Hi @BalajiEpari ,

Use below ACCOUNTNAME Rule and check:

CN=${user.firstname} ${user.lastname},${DynBaseDN}###CN=${user.firstname} ${user.lastname}1,${DynBaseDN}

[BalajiEpari]

Hi @pmahalle 

Getting same issue with this as well.

Regards,

Balaji Epari

[BalajiEpari]

Hi Team,

Can someone pls guide on this.

Regards,

Balaji Epari

[pmahalle]

Hi @BalajiEpari ,

Share your logs.

[BalajiEpari]

Hi @pmahalle 

PFA Logs,

Regards,

Balaji Epari

[BalajiEpari]

Hi Team,

Can someone pls suggest on this issue.

Regards,

Balaji Epari

[pmahalle]

Hi @BalajiEpari ,

Share your createaccount json

[BalajiEpari]

Hi @pmahalle 

CreateAccountJson

{
"cn": "${user.firstname} ${user.lastname}",
"givenname": "${user.firstname}",
"name": "${user.customproperty6}",
"objectClass": ["top", "person", "organizationalPerson", "user"],
"userAccountControl": "544",
"sAMAccountName": "${user.firstname} ${user.lastname}",
"sn": "${user.lastname}",
"hondaGUID": "${user.customproperty6}",
"mail": "${user.email}",
"employeeNumber": "${user.customproperty5}",
"company": "${user.companyname}",
"department": "${user.departmentname}",
"division": "${user.customproperty14}",
"l": "${user.city}",
"postalCode": "${user.customproperty2}",
"st": "${user.state}",
"streetAddress": "${user.street}",
"telephoneNumber": "${user.phonenumber}",

"departmentNumber": "${user.departmentNumber}",

"homeDirectory": "${DynHomeDir}${user.customproperty6}"

}

Note: I have tried "cn": "${cn}" as well, still same issue.

Regards,

Balaji Epari

[BalajiEpari]

I have also tried by adding sAMAccountName in CHECKFORUNIQUE as below still same issue.

{
"cn":"${user.firstname} ${user.lastname}###${user.firstname} {user.lastname}1",
"sAMAccountName":"${user.firstname} ${user.lastname}###${user.firstname} {user.lastname}1"
}

[pmahalle]

Hi @BalajiEpari ,

"cn": "${cn}" in your create account JSON.

ACCOUNTNAME :

CN=${user.firstname} ${user.lastname},${DynBaseDN}###CN=${user.firstname} ${user.lastname}1,${DynBaseDN}

CREATEACCOUNT JSON:

{
"cn": "${cn}",
"givenname": "${user.firstname}",
"name": "${user.customproperty6}",
"objectClass": ["top", "person", "organizationalPerson", "user"],
"userAccountControl": "544",
"sAMAccountName": "${user.firstname} ${user.lastname}",
"sn": "${user.lastname}",
"hondaGUID": "${user.customproperty6}",
"mail": "${user.email}",
"employeeNumber": "${user.customproperty5}",
"company": "${user.companyname}",
"department": "${user.departmentname}",
"division": "${user.customproperty14}",
"l": "${user.city}",
"postalCode": "${user.customproperty2}",
"st": "${user.state}",
"streetAddress": "${user.street}",
"telephoneNumber": "${user.phonenumber}",

"departmentNumber": "${user.departmentNumber}",

"homeDirectory": "${DynHomeDir}${user.customproperty6}"

}

[BalajiEpari]

Hi @pmahalle 

I have already tried with "cn": "${cn}"  in create account json. still same issue.

ACCOUNTNAME :

CN=${user.firstname} ${user.lastname},${DynBaseDN}###CN=${user.firstname} ${user.lastname}1,${DynBaseDN}

Regards,

Balaji Epari