ADSAccount is not writing to AD during fullsync

Hello,

We run Identity Manager 8.2.1.

Our users are administrated in Salesforce, so we have an hourly full sync from SalesForce to receive the user changes, joiners, leavers, etc. The user attributes are then synced to PERSON and we have some value calculation on ADSAccount to reflect the changes, like surname for marriage or other attributes.

The big problem here, the changes are not put to the Active Directory. If we change attributes manually in Person, then everything works fine. Also, when I do a value re-caclulation, everything is fine.

I found the reason why this happened. The process ADS_ADSAccount_Update/(De-)activate is checking in the generating condition if we a run a full sync and if so, do nothing.

So, is there any valid reason not to change this? And if yes, what is the correct way to populate changes during a fullsync to the active directory?

Best, Denny

Parents Reply Children