Identity Manager: unable to open Office365 account of Office 365 administrator

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

The customer has defined an Office365 endpoint.
There is one particular account that cannot be opened.The last lines logged on the JCS are the following:

2023-06-20 10:20:50,211 117728 [ApacheDS Worker-thread-18] (com.ca.jcs.o365:com.ca.jcs.o365.connection.O365ExecHelper:90) DEBUG  - Executing Powershell command (ExchMFA):get-group -Filter "members -eq 'CN=<CN1>,OU=<onmicrosoft domain>,OU=Microsoft Exchange Hosted Organizations,DC=<DC>,DC=prod,DC=outlook,DC=com
CN=<CN2>,OU=<onmicrosoft domain>,OU=Microsoft Exchange Hosted Organizations,DC=<DC>,DC=prod,DC=outlook,DC=com' -and (RecipientType -eq 'MailUniversalDistributionGroup' -or RecipientType -eq 'MailUniversalSecurityGroup')" -ResultSize Unlimited | select identity | fl
2023-06-20 10:21:32,783 160300 [Timer-6] (com.ca.jcs.o365:com.ca.jcs.o365.connection.O365ConnectionPool:86) DEBUG  - Start eviction of idle connections for connector type: O365 ( 1 Active, 0 Idle )

After that, JCS stopped working.

Environment

Release : 14.4 CP2

Resolution

The issue with checking Office365 users that is the admin of two organizations--the same Powershell command run from Powershell is failing.

HF_DE569985 resolved the issue.

Additional Information

Please be aware that since Office 365 accounts are checked using UPN - similar to below

Get-User -Identity "[email protected]" | fl

first to obtain their Distinguished Names, if for any reason there are 2 Identitities with the same UPN it will cause the same error, but this should be fixed on Office 365 level.