The string was not recognized as a valid DateTime. There is an unknown word starting at index 0.

Question

Good morning. 
 I am working on script to synchronize data from Servicenow to Active Roles. To do that, i have created a sync step in which SNOW is the source and ARS the target. In the updating rules, I have a forward sync rule in which I run my script. 
 The script basically modify the members of a given group from SNOW, using the Remove-QADGroupMember -Identity ($GroupName) -Member $c[$i] -Confirm:$false -Control @{'OperationReason'="Set by script"} // add-qadgroupmember -identity ($GroupName) -member $c[$i] -Control @{'OperationReason'="Set by script"}. This removes or add users to the group and create an entry in the change history. 
 However, as it is a sync task, I cannot get it working totally, always getting an error. In the beginning, I was synching the "members" target item (ARS attribute) and getting an error as the content of the members change before the script finishes. 
 Then I decided to try other options. First i went for one of the "Custom Attributes 10" that are available and there I got an error message saying that the attribute can only contain on value. What I could see in the details of the result window is that each user that were removed or added were included in the attribute + a "ActiveRoles.ManagementShell.Data.ArsServerConnection", that comes from the "Connect-QADService -proxy" to get the changes registered in the change history. 
 So the content of Custom attribute 10 would be ActiveRoles.ManagementShell.Data.ArsServerConnection, user1, user2, (blank). I added the blank with "Return $Null" to leave the attibute blank. Then I tried with "WhenChanged" attribute and adding the current date with "[DateTime]$date=Get-Date -Format "dd.MM.yyyy HH:mm:ss"" // return $date, getting the error of the subject. i have tried with and without declaring the type of $date, and changing the format to how it is currently registered. 
 I have also tried to use "Flags" attribute, integer, giving some similar type error. 
 So I am assuming that every time that the users are added/deleted, they are added to the target item. 
 After the long explanation, the question, is there a way of pass only the result needed, independently of what the script does? 
 Would you do this in a different way? I cannot use a direct connection with SNOW, if you are going to suggest that. 
 Best regards

JohnnyQuest · Answer

samael ambrona said: I got another syn rule working, with a similar script, but in the change history shows the status of the group before and after the change, which makes quite complicated to review the changes. 
 Unfortunately, that is the nature of Change History on groups. 
 samael ambrona said: but they don't appear in the list of available attributes, 
 You need to: 
 1) Add / create the virtual attribute in Active Roles: 
 https://support.oneidentity.com/technical-documents/active-roles/7.4.4/administration-guide/254#TOPIC-1624804 
 2) Stop and start your sync service to make it recognize the virtual attribute 
 NOTE: If the current Active Roles Sync Service Connection you are using for your "target" is not based on the Active Roles Connector, you will have to create another one that is in order to be able to see this virtual property in the list of available properties to write to. 
 samael ambrona said: also cannot find where the output information is kept, till it is assigned to the selected attribute, 
 What I would suggest you do here is modify the attribute mapping rule you are using to get your members from SNOW to use a Powershell script instead of just the SNOW property and add some diagonstic code to dump out the "raw" version of the value coming from SNOW. Something like this: 
 # Get the contents of the SNOW members attribute 
 $RawSNOWMembers = $SrcObj["SNOWMembersAttributeName"] 
 # Dump this to a file 
 Add-Content "My_Test_Log.txt" $("=" * 120 ) 
 Add-Content "My_Test_Log.txt" $RawSNOWMembers 
 Add-Content "My_Test_Log.txt" $("=" * 120 ) 
 # Pass the contents of the property on 'as-is' 
 $SrcObj["SNOWMembersAttributeName"]

Endpoint Privilege Management

The string was not recognized as a valid DateTime. There is an unknown word starting at index 0.

Top Replies