Cannot synchronize Email Quota in Exchange provisioning connector - CA Identity Manager

Products

• CA Identity Manager

Issue/Introduction

When assigning an account template (via a provisioning role) to an existing account in CA Identity Manager, the email quota values from the account template fail to propagate to the Active Directory/Exchange account. The account retains default quota values instead of the values defined in the template.

The account template contains the following values:

• eTADSmDBUseDefaults: FALSE
• eTADSmDBStorageQuota: 102456
• eTADSmDBOverQuotaLimit: 102456
• eTADSmDBOverHardQuotaLimit: 102456

Environment

• Component: IDENTITY MANAGER, IDENTITY SUITE
• Release: 14.x, 15.x

Cause

When synchronizing an account template with an account using weak synchronization, the IM provisioning server evaluates which value is "better."

• eTADSmDBUseDefaults: This is a boolean attribute. A value of TRUE is considered "better" than FALSE.
• Integer attributes (e.g., eTADSmDBStorageQuota): A higher integer value is considered "better."

If the target account has eTADSmDBUseDefaults=TRUE (default quotas), the provisioning server determines that TRUE is "better" than the template's FALSE value. Consequently, the default quota prevails, and the template values are not applied.

Resolution

To ensure the correct quota values are propagated, configure the account template to use strong synchronization.

1. Open the account template in the Identity Manager environment.
2. Set the synchronization method to Strong Synchronization.
3. Ensure that all account templates associated with the same AD endpoint have eTADSmDBUseDefaults=FALSE. If a provisioning role includes multiple templates, ensure this configuration is consistent across all of them to prevent the default quota from overriding the template values.