When provisioning policy is applied to populate the ‘Name (cn)’ attribute with other combined attributes (i.e. must be specified; must be: %, %(%)), the wizard produces an error:
Failed to create object
Corporate policy violation. The ‘Name’ property value does not conform to corporate policy.
The specified value ‘name lastname, name last name (’ does not conform to policy requirements.
Img.1: error example.
This is by design. In the example above, the ARS MMC client does not populate the description and employeeID attributes until the the name is fully generated.
An Enhancement Request (TF00664645) detailing the feature: new user object creation wizard to populate the user's name attribute (cn) immediately if policy is applied.
WORKAROUND
Use the onPostCreate script policy which renames the User, executing the rename operation as a background prevents errors from being generated. See the enclosed document for detailed information about the implementation of the workaround (it employs a Start-Job technique to introduce a delay between the completion of the user creation wizard and the actual renaming of the account.).
STATUS
The product team will evaluate the request and this feature may become available on a future release of the product.
Please refer to this article for updates or contact support referencing the Enhancement Request ID: TF00664645.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center