'Object type Administrative_Units_Container is not valid for extension Azure' Error After Upgrade

Products

• CA Identity Suite
• CA Identity Manager
• CA Identity Governance

Issue/Introduction

This article addresses connector configuration failures that occur after applying a cumulative patch update. This typically manifests as a validation error related to Azure extension types.

ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /iam/im/ws/wsconfiguration/identityEnv: javax.servlet.ServletException: java.lang.IllegalArgumentException: Object type Administrative_Units_Container is not valid for extension Azure
        at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:432)
        at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:370)

Environment

• Product: Identity Manager, Identity Governance
• Version: 14.5, 15.0

Cause

Cumulative patches may introduce updated connector metadata. If this metadata is not manually deployed after the patch upgrade, the system may fail to recognize updated object types (such as Administrative_Units_Container), resulting in configuration errors.

Resolution

To resolve this issue, you must update the connector metadata within Connector Xpress.

1. Open Connector Xpress and connect to the Connector Server.
2. Locate and update the Azure connector metadata to the latest version.
3. Restart both the Identity Manager (IM) and Identity Governance (IG) services.

For detailed instructions on deploying connector metadata, please refer to the documentation here: Deploy Connector Metadata.

 

Additional Information

If the Azure Endpoint is not in use, you may resolve the error by removing the Azure Endpoint screens.