VMware Identity Manager Directory Sync fails with Error 'Response from connector: Failed to complete dry run' and contains an unreported user

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Directory sync fails with below errors:
  Response from connector: Failed to complete dry run.
  
  
• Unable to sync the domain users and groups from the VMware Identity Manager (vIDM) connectors.
  
  
• Unable to login to Aria Automation and Aria Lifecycle Manager  using domain user.
  
  
• The "connector.log" file contains error messages similar to:

ERROR (tomcat-http--36) [connector_name;admin@connector_name;loopback_address;] com.vmware.horizon.connector.mvc.UIAlerts - Failed to complete sync due to a problem with the service. Exception Info: The service reported that group: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (Group_name) contains an unreported user: xxxxxxxxxxxxxx-xxxx-xxxx-xxxxxxxxxxxx
ERROR (tomcat-http--36) [connector_name;admin@connector_name;loopback_address;] com.vmware.horizon.connector.rest.SyncConfigurationRestController - Failed to complete dry run.

Environment

VMware Identity Manager 3.3.x

Cause

This issue may occur when the same users are being added to multiple Active directory domains.

Resolution

To resolve directory sync issue:

• Configure individual directories for each Active Directory domains
  
  Reference Doc : Set Up Active Directory or LDAP Directory Connections
  
  
• Disable Global Catalog: Ensure the Global Catalog option is unchecked. This prevents user account overlap between domains.