Resolve 'Provisioning Attribute Should Be Mapped' Error During Explore and Correlate for Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

During the Explore and Correlate process with the "Create users as needed" option enabled, you may encounter synchronization errors in the Application Server logs indicating that required attributes (e.g., sn or givenName) are missing. This article explains how to resolve these inbound synchronization failures by configuring the Explore and Correlate definition.

Environment

Identity Suite 14.5 & 15

Cause

When the "Update user fields" option is disabled in the Explore and Correlate definition, the Provisioning Server does not update Global User attributes. Consequently, the inbound notification payload lacks mandatory attributes (such as sn or givenName), causing the Identity Manager (IM) corporate user creation to fail with the following error:

• ERROR [im.provisioning.translator] The attribute sn in the corporate directory is required. A provisioning attribute should be mapped to it.

Resolution

1. Navigate to the Explore and Correlate definition in your Identity Manager environment.
2. Locate the configuration settings and select the Update user fields option.
   
   
   
3. Save the updated definition.
4. Re-run the Explore and Correlate process to initiate a successful synchronization.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.