Sync service return NULL from a powershell scrip

Have you tried returning a value of $null if no manager DN can be determined?

To Richard.Lambert point - the value being returned is likely a null string which is not the same as null.  Active Directory doesn't like it when you try to set an attribute's contents to a null string.

To wit:

$MyNullString = ""

$MyNull = $null

Unfortunately that doesn't work. 

The PS is returning "System.Collections.Generic.List`1[System.Object]" and that's what the Sync Service will try to write to the attribute. 

Below is my PS script, if I replace $null with "CN=DummyManager,OU=Test,DC=xxx,DC=xxx" it worrks fine. ExtensionAttribute4 hold the HR ID of the object.

try
{
   $Filter = "(extensionattribute4=$($($srcObj["AssignedManager"])))"
   $manager = (Get-QADuser -LdapFilter $filter ).DN
   if (($manager | Measure-Object).count -eq 1) {$manager} else {$null}
}
catch
{
   $null
}

one other interesting thing:

$srcObj["AssignedManager"]) is not available in the PS script, unless I first have it synced by a sync rule to any other attribute. It looks like it doesn't exist in the hast table unless it is being used in one of the flows. 

Hi, that "System.Collections.Generic.List`1[System.Object]" value that is being returned is actually a product defect in the version you are on, when attempting to return a $null value. That version of your script is probably correct and would work as you need it to, after an ARS update to resolve that defect.

support.oneidentity.com/.../system-collections-generic-list-1-system-object-error-in-active-roles-synchronization-service-when-returning-a-null-value

Hello Nick, 

I am on version 7.5 (latest).