Azure Active Directory synchronization job fails after upgrade (4371194)

Azure Active Directory synchronization job fails after upgrade

After upgrading from 8.1.x to 9.x the Azure Active Directory synchronization job fails with the following error:

"[1777239] The mapping rule (vrtOwners_Owners) was unable to run synchronization between system objects (object1) and (object2) successfully.
[1777286] Could not create matching member system objects for the other side of the target system for 1 system objects of schema type (ServicePrincipal)."

A ServicePrincipal is the owner of another ServicePrincipal. This is not currently supported by the graph api.

WORKAROUND

Disable the vrtowners mapping rule for the Application mapping:

1. Login to the synchronization editor with an applicable account

2. Load the Azure Active Directory synchronization project

3. Click on Mappings

4. Double left click on Application

5. Navigate to the Property mapping rules section

6. Locate and click on vrtOwners

7. Click the drop down next to Mapping direction

8. Select Do not map

9. Click the Ok button

10. Click on Commit to database

STATUS

Enhancement request number 36206 has been submitted to the product team for consideration in a future release of Identity Manager.

36206