In the Active Roles Synchronization Service and Quick Connect, when working with a SQL data source, it is possible for a value to be either a NULL or an empty string.
These are functionally different values with different properties. When performing an unmodified update, some systems, such as an Oracle database, will treat them as interchangeable. Some will not. Active Directory attributes, for example, can contain a NULL but cannot contain an empty string.
If syncing from a SQL source system to an Active Directory target system, empty strings will need to be converted into NULL values, otherwise, an error message similar to the following will occur during an update attempt:
The attribute syntax specified to the directory service is invalid.
WORKAROUND
Configure a Rule update and use the option to Remove leading and trailing whitespace characters when working with a SQL source which has empty strings and when updating to a data source which does not accept empty string values.
STATUS
Waiting for a fix in a future release of Active Roles.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Términos de uso Privacidad Cookie Preference Center