• "ADS_PersonHasTSBAccountDef_Autocreate_ADSAccount/Contact" Error

    Hello All,

    I get an Error for Account Def assignment. 

    ErrorMessages (2025-03-24 16:58:11.117) [810077] ADSAccount: The following fields are compulsory and need to be filled: Canonical name, Name, Distinguished name, Login name (pre Win2000).

    This is a…

  • Error running synchronization.

    [2134003] Error running synchronization.
    [1777018] Error running synchronization project (Active Directory Domain (DC=AD-LAB,DC=LOCAL))'s workflow (Provisioning).
    [1777124] Error running synchronization step (computer) of synchronization configuration…

  • Error running synchronization.

    (2025-02-14 18:39:00.097) [2134003] Error running synchronization.
    [1777018] Error running synchronization project (Active Directory Domain (DC=AD-LAB,DC=LOCAL))'s workflow (Initial Synchronization).
    [1777292] Error connecting system (Active Directory…

  • [2134003] Error running synchronization.

    (2025-02-14 18:39:00.097) [2134003] Error running synchronization.
    [1777018] Error running synchronization project (Active Directory Domain (DC=AD-LAB,DC=LOCAL))'s workflow (Initial Synchronization).
    [1777292] Error connecting system (Active Directory…

  • Azure AD Last Login

    Is there the possibility to show in One Identity the last login in Azure? 

    The new version 9.3 will introduce this possibility?

  • Task "Synchronize this object" is missing in Tasks pannel

    Hello experts.

    I am turning to you becouse I'm running out of ideas as to why there is a task "Synchronize this object" present in DEV environment, but not in PROD environment.

    We created a first time installation at our customer in DEV…

  • Change the Display pattern of AD-Groups

    Hey guys,

    How can I change the display pattern of the result list of AD groups when I try to assign a group to an AD user?

    Right now it shows the display names of the groups, but I want to change it to the CN.

    I am talking about the interface where…

  • Manually delete an AD account from OneIM and target system

    Hi,

    Normally we have set the  deferred deletion period  7300 days (20 years.) It means we don't want the accounts are deleted.  But we have an exceptional situation for if a new identity certification was denied then we want to delete Identity and all…

  • MatchPatternMemberShip,

    I am having requirement to define the Azure AD group to get added for Standard and Cloud admin. I do not see any reference number in MPFM for this requirement. Do we have any link to see category and reference number

  • ADHocProjection properties and values missing from logs when Read-only enabled

    Hi

    We are using Identity Manager On-demand Starling 8.2.1 

    We don't have an Active Directory test environment so the way we get past this is to enable "Read-Only" mode on the Production target system connector within our Test environment.…

  • AD group membership not applying in actual AD

    We have created a dynamic role assignment and assign a certain AD group to it.

    The AD group appears in OIM to be added to the user, however it was not reflecting/applying to actual AD.

    No frozen jobs found in job queue. We are using version 9.0 LTS.

    Also…

  • Authoritative source for Active Directory samaccountname (marriage changing of surname)

    What is the good practise regarding the updating of user accounts in the scenario of where the person gets married?

    *disclaimer* I am currently pre-implmentation certified (all theory no practise), so I have done the courses and certifications but have…

  • Keep group membership after termination

    Hello experts,

    Can someone tell me if we can keep group membership of a group assigned by a business role after termination? We have the AD account deferred for 90 days after termination. 

    Thank you,

    Lu

  • How limit acess to the web portal to another Active directory accounts with the same identity

    Hi

    Version: OIM 8.2

    is possible to block or to limit acess from a specifc ADSAccount (used for suport cases) to the Web portal, the method used  Actually for login is Active Directory user Account (Manual Input/Role Based)

    the question is if have some…

  • Indian Best Actor,Singer and musicion

    Maulik Nayak portrayal of 'Bhaglo' is a character who communicates volumes through silence. In the film 'Hellaro,' 'Bhaglo' is a pivotal figure who conveys a deep range of emotions and experiences without uttering a word. Nayak's performance is a testament…

  • How to create ADSContainers and invalid characters when sending emails

    Hi!
    I would appreciate your help with:
    1. Is there a way to create a container based on Department for a specific domain and assign a user? I tried using Synchronization Editor but only what it removed existing containers
    2. When creating a user, a mail…

  • Active directory simulation does not work

    Hi to all!

    I've configured an Active Directory connector using the remote connection plugin, it seems to work correctly except for the simulation function. When I click the simulate button I get no any results, but when I run the sync project it performs…

  • How to perform a reconciliation of Active Directory

    Hi

    Is there a report available that we can use to tell us differences between what One Identity believes is in Active directory (ADSAccount) and what is actually in Active directory?

    For example: We have identified quite a few ADSAccount records where…

  • Assign Full Control of Computer to Active Directory user Account to make a rejoin.

    Hi,

    I have a request from customer about the possibility to give Full Control Permissions over an Active Directory Computer through One Identity Manager 8.1.5, maybe through request on ITSHOP.


    The reason is about having the permissions to make a rejoin…

  • Error carrying out the user_protectedfromaccidentaldeletion_Get operation

    Hi,

    I've encountered the following error when running Active Directory Initial Synchronization.

    [System.Exception] Error carrying out the user_protectedfromaccidentaldeletion_Get operation on object CN=ASPNET,CN=Users,DC="blank",DC=lan (Error: [System…

  • Remove an Active Directory domain and all its related objects

    Hello group!!

    Recently, we have decommissioned an Active Directory domain and now what we want to do is remove it from IDM and all of its related objects.

    After doing some search in the One Identity documentation, I have found this stored procedure QB…

  • SAPHR Synchronization Editor LOG Error [810235] Could not delete object from Person because there are still objects assigned

    Hi,

    Currently we are using version 8.1.3.

    Once in a while the client team review the log of the synchronization  project "SAPHR" (CSV File import).

    The log contains a few error messages regarding Synchronization step "Person".

    Usually…

  • Adding to AD Group when Employee is disabled

    Hello 

    I have a little problem with active directory group assignment.

    I want the disable users group to be added to the active directory account when the user is disabled.

    I also want it to be removed from all other groups except this group.

    What should…

  • deferred deletion of ADS containers stalled

    Hello,

    I'm trying to provision a hierarchical structure of OUs to AD. One of the problems I have is that in OIM I've created, at the same hierarchical level, multiple OUs with the same name. This seems to be allowed in OIM, but not allowed in AD; and…

  • AD sync failing with parameter exception error.

    Hi Team,

    AD sync is continuously failing with error,

    ErrorMessages (2022-05-12 11:56:52.830) [2134003] Error executing synchronization.
    [1777018] Error executing synchronization project (Active Directory Domain (DC=***,DC=INT))'s workflow (Active Directory…