Skip to Content

AD groups provisioning issue when SAP User ID and AD User ID are different

Hi,

I am having issue when trying to provision AD groups through GRC Access request when SAP ID and AD ID are different. we are maintaining SAPUSERNAME attribute in AD with SAP ID for AD account.

I don't see any issue with selecting AD users in to Access request. I have done the mapping as below.

LASTNAME SN
FIRSTNAME GIVENNAME
USERID SAMACCOUNTNAME
ROLE_NAME NAME
MEMBER_OF MEMBEROF
EMAIL MAIL
MANAGERID MANAGER
SAP_USER_ID SAPUSERNAME

I am getting "User does not exist in LDAP" provisioning error as it is looking for "SAP USER" in the AD to provision access instead of AD account name.

Please help.

Thank you,

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

0 Answers