After Upgrade from 14.1 CP5 to 14.3 - Office365 correlation does not work

Products

• CA Identity Manager

Issue/Introduction

After Upgrade from 14.1 CP5 to 14.3 - Office 365 correlation does not work

Account name returned by O365 connector after upgrade has a form of username@domain

Before upgrade it was just username

Correlation process no longer associates existing users with O365 accounts. Instead it associates all O365 accounts with [default user]

Environment

Release : 14.1 CP6 and later, 14.2, 14.3

Component : IdentityMinder(Identity Manager)

Cause

Office 365 connector behavior changed post 14.1 CP5, because new functionality was added.

Resolution

After connector code has changed, it is no longer possible to correlated against account name.

Another attribute has to be used for correlation.

One possible solution is to use email address to correlate:

This, however, may not be possible if the primary email address of a global user has a different value than account name in O365.

The DE489305 fix adds a new attribute 'Logon Name', which return exactly the same value as in eTDYNAccounName in 14.1 CP5 and earlier connector. This is how to configure correlation attribute for DE489305:

The hotfix is attached to this KB article.

It can be installed on top of 14.2 and 14.3

The fix is included in 14.4 and 14.3 past CP2