Error while creating account in AD - [LDAP: error code 32 - No Such Object]

[saoual]

Hello,

In a completely random way, when umboarding a user, a role is given by default.

For some users, the task ends with the error "Error while creating account in AD - [LDAP: error code 32 - No Such Object]". I've checked on the target, the group does exist. When I investigated, I found that it was the accountID that was the problem. In each case the accountid = username or in the normal case accountid = nameinnamespace (example for this username: 'flastname' the normal accountid is 'uid=flastname, ou=xxx, ou=xxx, dc=xxx', but the accountid is wrongly created and is 'flastname') , after that when I make a new request via ARS it works and the accountid is well generated.

I have already carried out the checks suggested in the following ticket: https://forums.saviynt.com/t5/identity-governance/error-while-creating-account-in-ad-ldap-error-code...
and there's no problem with the target, the group does exist. Can you please help me?

Regards

[rushikeshvartak]

One time fix all impacted accounts accountid using enhanced query

[saoual]

Hi rushkeshvartak, 

Since the import job has been executed, the accounts are suspended from import service, the requests have to be renewed. i'm trying to determine the root cause and correct the problem so as not to have this situation again.

[rushikeshvartak]

You need to evaluate logs to find RCA

[saoual]

Hi, I've looked and there's nothing in the logs to justify this behavior. Has anyone had this behavior before? Or do you have any suggestions? Regards

[NM]

Hi @saoual , are you storing guid in accountid??

[saoual]

Hi NM,

The accountid corresponds to the nameinnamespace, the guid is stored on another customproperty and is used as a reconciliation field.