Person’s Manager Not Updating in Target System (4374189)

The Person object in One Identity Manager correctly shows the Manager (UID_PersonHead); however, this value is not being updated or provisioned to the target system (e.g., Active Directory).

• This issue occurs even though provisioning works correctly for other attributes.
• The ADSAccount exists and is correctly linked to the Person.
• The provisioning workflow runs successfully with no errors in the Job Queue.
• The Manager attribute in the target system (AD) remains unchanged or empty.
• Manually editing the ADSAccount directly causes AD to update successfully.

This behavior is currently by design. The default templates provided out-of-the-box may not automatically resolve the Manager reference from the Person table to the ADSAccount in all configurations.

Consequently, the ADSAccount does not receive a manager reference from the Person template, resulting in a NULL value being sent to the target system.

WORKAROUND: To resolve this, a custom Value Template can be added to the ADSAccount.ObjectKeyManager attribute (or your specific mapped Manager field) to automate the manager assignment. 

1. Open the Designer tool.
2. Navigate to the One Identity manager Schema - Table - ADSAccount.
3. Select the ObjectKeyManager column, click on Valaue Calculation tab in column properties.
4. Enable Overwrite option, and add the following script to the "Triggers for this template":

If Not CBool(Variables("FULLSYNC")) Then
  Select Case ($FK(UID_TSBBehavior).ITDataUsage:Int$)
     Case 0:'do not get data from employee
     Case -1:'fill property initially from the ITData of the employee
        If Not $[IsLoaded]:Bool$ Then

       If $FK(UID_Person).UID_PersonHead$ <> "" Then
        Value = Connection.GetSingleProperty("ADSAccount", "XObjectKey", "UID_Person = '" + $FK(UID_Person).UID_PersonHead$ + "'").String
       End If

    End If
     Case 1: 'update property depending on ITData of the employee
    If $FK(UID_Person).UID_PersonHead$ <> "" Then
        Value = Connection.GetSingleProperty("ADSAccount", "XObjectKey", "UID_Person = '" + $FK(UID_Person).UID_PersonHead$ + "'").String
    End If
  End Select
End If

STATUS: Enhancement Requests 440757 and 440756 have been created for a default out-of-the-box template.