Click HERE to see how Saviynt Intelligence is transforming the industry. |
10/08/2024 03:05 AM - last edited on 10/08/2024 10:48 AM by Sunil
Any idea to tackle the null object issue while trying to create an account in AD
We have the following create account json (as show as below) on Active Directory.
When IGA attempts to create the account, it prompts the following error.
checking on system log, it shows:
However, when we run the simulation on pending task list, it is not Null.
Any advice?
{
"accountExpires": "0",
"company": "XXXXXXX",
"department": "${if(user.username==task.accountName){if(user.customproperty2=='Active'){user.departmentname} else if(user.customproperty1=='Active'){user.customproperty12} else if(user.customproperty3=='Active'){'AA'} else if(user.customproperty4=='Active'){'XT'} else if(user.customproperty42=='Active'){'XX'}} else {department}}",
"physicalDeliveryOfficeName": "${(user.username==task.accountName)?(user.customproperty2=='Active')?user.location:'':''}",
"displayname": "${if(user.username==task.accountName){if(user.customproperty2=='Active'){if(user.customproperty43!=null){user.customproperty43} else {user.preferedFirstName}} else {user.customproperty7+user.displayname}}else {task.accountName}}",
"givenName": "${(user.username==task.accountName)?user.firstname:task.accountName}",
"mail": "${(user.username==task.accountName)?user.email:''}",
"mailNickname": "${(user.username==task.accountName)?user.username:''}",
"name": "${task.accountName}",
"employeeID": "${user.username}",
"objectClass": [
"top",
"person",
"organizationalPerson",
"user"
],
"unicodePwd": "XXXXXX",
"sAMAccountName": "${task.accountName}",
"sn": "${(user.username==task.accountName)?user.lastname:'XXXXX'}",
"title": "${if(user.username==task.accountName){if(user.customproperty2=='Active'){user.jobcodedesc} else if (user.customproperty39=='Active'){user.jobcodedesc} else if (user.customproperty1=='Active'){'Undergraduate Student'} else if (user.customproperty3=='Active'){'Alumni'}} else {' '}}",
"telephoneNumber": "${(user.username==task.accountName)?user.phonenumber:''}",
"userAccountControl": "512",
"userPrincipalName": "${task.accountName}@dev.XXXXX.hk",
"targetAddress": "${if(user.username==task.accountName){if(user.customproperty2=='Active'){'SMTP:'+user.username+'@removed.mail.onmicrosoft.com'} else if (user.customproperty39=='Active'){'SMTP:'+user.username+'@removed.mail.onmicrosoft.com'} else {''}} else if (ADExtensionAttribute1 == null){''} else {'SMTP:'+task.accountName+'@removed.mail.onmicrosoft.com'}}",
"proxyaddresses":{"REPLACE":[ "${if(user.username==task.accountName && (user.customproperty51==null)) {''} else if(user.username==task.accountName) {(user.customproperty51).replaceAll(',','","')} else if(user.username!=task.accountName&&(aalias=='')){('SMTP:'+task.accountName+'@XXXX.hk')} else {('SMTP:'+aalias+'@**********.hk,smtp:'+task.accountName+'@XXXX.hk').replaceAll(',','","')}}"]},
"extensionAttribute1":"${if(user.customproperty41!=''&&(user.username==task.accountName)){'STAFFO365'} else if (user.customproperty41==''&&(user.username==task.accountName)){' '} else {ADExtensionAttribute1} }",
"extensionAttribute2": "${(user.username==task.accountName)?'1ST':'2ND'}",
"extensionAttribute5": "${if(user.customproperty39=='Active'&&(user.username==task.accountName)){task.accountName+'@dev.XXXX.cn'} else if(user.customproperty1=='Active'&&(user.username==task.accountName)){user.username+'-c@dev.XXXX.hk'} else if (user.customproperty3=='Active'&&(user.username==task.accountName)){user.username+'-c@dev.XXXXX.hk'} else{user.username+'@dev.XXXXX.hk'}}", "extensionAttribute11":"${if(user.customproperty48==null){''} else {user.customproperty48}}", "extensionAttribute15": "${(user.username==task.accountName)?(user.customproperty2=='Active')?'XXXXXumd\\'+task.accountName:'':''}",
"msExchUsageLocation": "HK",
"msExchHideFromAddressLists": "${(user.username==task.accountName)?(user.customproperty2=='Active')?'FALSE':'TRUE':'TRUE'}",
"msNPAllowDialin": "TRUE"
}
[This message has been edited by moderator to mask sensitive information]
10/08/2024 03:25 AM
@oscarcheng try keeping support empty string to false once in AD connector.
10/08/2024 10:42 AM