Dealing with IdBID in the Distinguished Name template from UNIFYBroker/Microsoft Identity Manager

If you have a management agent that needs to provision to a UNIFYBroker adapter that uses @IdBID (the entity ID) in the Distinguished Name Template, you must follow these steps:

1. Configure the management agent to track the entryUUID field.
2. Alter your Provisioning Rules Extension to generate a random GUID, set the entryUUID attribute on new connector space entries and set the DN to include that GUID. The following example code snippet demonstrates how you might set the entryUUID and DN appropriately

public void Provision(MVEntry mventry)
{
    ConnectedMA outputMA = mventry.ConnectedMAs[TargetMA];
    string entryUUID = Guid.NewGuid().ToString();
    ReferenceValue dn = outputMA.CreateDN($"UID={entryUUID},OU={TargetContainerName},DC=IdentityBroker");
    if (outputMA.Connectors.Count == 0)
    {
        CSEntry csEntry = outputMA.Connectors.StartNewConnector(TargetObjectType);
        csEntry.DN = dn;
        csEntry["entryUUID"].Value = entryUUID;
        try
        {
            csEntry.CommitNewConnector();
        }
        catch (ObjectAlreadyExistsException e)
        {
            if (outputMA.Connectors.ByDN[e.DN].ConnectionState != ConnectionState.Disconnected)
                throw;
        }
    }
}