"Mapping Missing for the required Attribute: XXX" When trying to Add or Sync Active Directory on VMware Identity Manager

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When attempting to add new Active Directory Integration on VMware Identity Manager or Sync existing Active Directory integration, the task fails with the error similar to: 
  'Mapping missing for the required attributes: xxx'
  
  
• Example below shows attribute 'Password' as example:
  
  
  
  
• The entered binding DN and Base DN with password are valid as test connection is Successful:
  
  
  
  
• Upon trying to Save configurations, The Integration add passes through step 1 and 2 and fails at step 3:
  
  
  
  
  
• The Connector logs show error similar to:
  
  

  YYYY-MM-DDT##:##:## ERROR (Thread-4) [VIDM;########-###-####-####-############;##.##.##.##;] com.vmware.horizon.connector.management.ConnectorInstanceServiceImpl - Problem occurred during association of connector instance to directory.
  com.vmware.horizon.connector.management.e#ception.RequiredAttributeMappingMissingE#ception: vidm.required.attribute.mapping.missing
          at com.vmware.horizon.connector.management.connectorcommunication.ConnectorUserAttributesMappingsService.verifyAllRequiredAttributeHaveMappings(ConnectorUserAttributesMappingsService.java:115) ~[connector-management-business-0.1.jar:3.3.7.0 Build 21173100]
          at com.vmware.horizon.connector.management.connectorcommunication.ConnectorUserAttributesMappingsService.saveUserAttributeMappingsInConnector(ConnectorUserAttributesMappingsService.java:80) ~[connector-management-business-0.1.jar:3.3.7.0 Build 21173100]
          at com.vmware.horizon.connector.management.ConnectorServiceImpl.associateConnectorToDirectory(ConnectorServiceImpl.java:1539) ~[connector-management-business-0.1.jar:3.3.7.0 Build 21173100]
          at sun.reflect.GeneratedMethodAccessor2267.invoke(Unknown Source) ~[?:?]
          at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_352]
          at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_352]
          at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344) ~[spring-aop-5.2.22.RELEASE.jar:5.2.22.RELEASE]
          at org.springframework.aop.framework.JdkDynamicAopPro#y.invoke(JdkDynamicAopPro#y.java:205) ~[spring-aop-5.2.22.RELEASE.jar:5.2.22.RELEASE]
          at com.sun.pro#y.$Pro#y975.associateConnectorToDirectory(Unknown Source) ~[?:?]
          at com.vmware.horizon.connector.management.ConnectorInstanceServiceImpl.associateConnectorToDirectory(ConnectorInstanceServiceImpl.java:287) ~[connector-management-business-0.1.jar:3.3.7.0 Build 21173100]

Environment

    VMware Identity Manager 3.3.x

Cause

• This is caused if there are any binding attributes defined which are marked as 'Required', but may not be present on the AD users' attributes, thus causing the Sync/Add to fail while trying to map the attributes on both the end. 
• It may sometimes be noticed that the attribute being flagged for missing mapping, is not visible in the defined binding attributes when validating form the UI. However, when trying to add a new attribute with the same Name, would give error out the attribute creation saying 'Attribute names have to be unique'. 
  
   

Resolution

    Database modifications are required to resolve this issue, please open a Support Request with Broadcom Technical Support and note this Article ID (372964) in the problem description. For more information, see Creating and managing Broadcom support cases.