0
Answered

How do I set sAMAccountName from Broker/Plus when provisioning, but then flow it back in from AD thereafter?

Adrian Corston 5 years ago in UNIFYBroker/Plus updated by Beau Harrison (Senior Product Software Engineer) 5 years ago 3

I need to set a user's account name when provisioning via Broker/Plus, but then flow that value back in from AD subsequently (so the value is picked up when joining to an existing AD account, and so that if the username can be changed in AD it will be automatically updated in Broker).

Can you please confirm whether or not the approach below will work, and advise if there is a better way to do it?

1. Set the Link mapping on the AD->Locker to Bidirectional for the AD username field
2. Set a value for the attribute in the Outgoing Pre-Provisioning Task

Answer

Answer
Answered

Hi Adrian

Your approach is correct, however you won't need to set username field as bidirectional on the AD->Locker link. Values set by pre-provisioning task aren't affected by the mapping rules, so Adapter to Locker is fine. 

On CheckFieldUniqueness, yes that function is available in outgoing pre-provisioning tasks.

Also, with this approach is the $components.CheckFieldUniqueness() function available in the AD->Locker Link Outgoing Pre-Provisioning task, for generating a unique username?

Answer
Answered

Hi Adrian

Your approach is correct, however you won't need to set username field as bidirectional on the AD->Locker link. Values set by pre-provisioning task aren't affected by the mapping rules, so Adapter to Locker is fine. 

On CheckFieldUniqueness, yes that function is available in outgoing pre-provisioning tasks.

Perfect, thank you!