Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

One Click Disable - disable account task is failing

Ratna
New Contributor II
New Contributor II

Hi,

When we are trying to terminate the account through "One Click Disable", account status is changed to Inactive but the disable account task is failing.

Please check the below error message:

Error while Delete operation for account-OU21718 in AD - [LDAP: error code 16 - 00000057: LdapErr: DSID-0C0911FF, comment: Error in attribute conversion operation, data 0, v4f7c]

 FYI, the normal terminations are working fine as we are triggering Remove Account Task. And also JSON for both remove and disable accounts are same.

2 REPLIES 2

NM
Honored Contributor III
Honored Contributor III

@Ratna share json.


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

rushikeshvartak
All-Star
All-Star

 

  • Examine Attribute Types in Saviynt:

    • Check that attributes defined for the disable operation in Saviynt, such as AccountStatus or ValidThrough, are compatible with AD attribute requirements. Attribute conversion errors commonly occur if attributes are missing or if incompatible data types are being applied.
  • Cross-Verify Account DN (Distinguished Name):

    • Ensure that the Distinguished Name (DN) of the account being disabled is correct. If an account has been moved between OUs, this error can appear if AD can’t locate the account due to an outdated DN.
    • Verify whether any dynamic attributes affect the OU placement, as these could impact the disable task if they’ve been altered.

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.