Skip to Content

SAP IDM 7.2 task not being called during provisioning

When I provision a new user in IDM one of the tasks that assigns an active directory group to an active directory user is not being called. It calls the other AD tasks but not the one that assigns the group - Any ideas?? I.e. it calls CreatADSUser, Enable ADSUser, CreateExchange2010User, SetADSPassword but does not call AssignUserToADSGroup.

I cannot find out why and there are no errors I can find in any log.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Feb 01, 2017 at 09:57 PM

    Well, I guess I'd go with the basics, are the tasks enabled, and dispatchers assigned? Repository assigned? Can you run the workflow / task using test provisioning task?

    Add comment
    10|10000 characters needed characters exceeded

    • I have narrowed it down even more. There is a Pass: 4. Exec Plugin - Assign User Membership task that runs. It runs for the ERP repository but it doesn't run for the AD repository.

  • Feb 01, 2017 at 11:17 PM

    I have narrowed it down even more. There is a Pass: 4. Exec Plugin - Assign User Membership task that runs. It runs for the ERP repository but it doesn't run for the AD repository.

    Add comment
    10|10000 characters needed characters exceeded

    • Hello Morley,

      In this case, I would recommend, Re-import the provisioning framework and recreate the repository - If it is Development system otherwise enable the trace and share the log file.

      Regards,

      C Kumar

      Regards,

      C Kumar

  • Feb 06, 2017 at 02:35 PM

    Hi Morley,

    As suggested by every one. Please check the following

    1. Are there any wait tasks in Provisioning Queue search based on user mskey.(mxpv_provision).

    2. Check the hook task in the respective repository.

    3. check whether dispatchers are set & are running, whether action task and job is enabled for the task AssignUserToADSGroup under the AD Connector.

    4. enable trace for the user and check the logs in the table or from admin ui.

    Still issues then please drop me your lync or skype id to my message will contact you.

    Regards,

    DP

    Add comment
    10|10000 characters needed characters exceeded