When a new Entra ID group is created in the Manager, it is provisioned as usual.
However, the object for the newly created group does not have an Object ID (id).
If the object is read from Entra ID using ‘Synchronise this Object’, the group is marked as Outstanding.
This means that no assignments can be made after the group has been created, as the object cannot be found in Entra ID.
The Entra ID Group is provisioned to Entra ID with success.
The ID is not delivered back to OneIM DB during the AdHocProtection.
Errors seen in the log files:
'Error: [System.Exception] [Exception]: ServiceException occured
Code: Request_ResourceNotFound
Message: Resource '9c02a40d-1193-4d4c-9a9b-d2857018ef0a' does not exist or one of its queried reference-property
objects are not present.
[ODataError]: Code: Request_ResourceNotFound - Message: Resource '9c02a40d-1193-4d4c-9a9b-d2857018ef0a' does not exist
or one of its queried reference-property objects are not present.
Product Defect
The reported issue (UID not filled after group creation) is caused by a missing GET retry in the 9.3 connector. After IDM creates a group in Entra ID, it issues a GET to retrieve the object's UID. Due to Entra replication delay, this GET may transiently fail with a 404 error. In release 9.3, "HttpMethod.Get" was not included in the retry methods, so the GET is never retried and the UID stays empty.
Raise a Service Request with the Support Team and ask for Hotfix #699358.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center