AzureRest Error: BadRequest - Object references already exist for 'members' property

Products

• CA Identity Suite

Issue/Introduction

When adding new resources (groups) to account templates linked to an Azure endpoint with hybrid mode enabled, the following error regularly occurs if the accounts are already members of those resources:

ERROR - A remote server returned an error: org.apache.directory.shared.ldap.exception.LdapNamingException: JCS@####: AzureRest: Bad Request, Detailed Error: {"error":{"code":"Request_BadRequest","message":"One or more added object references already exist for the following modified properties: 'members'."}}

Environment

Identity Manager 14.5.1 CHF2

Cause

This issue is caused by a product defect where the AzureRest connector attempts to add a member that already exists in the target group, leading to a Request_BadRequest from the Azure API. This consistently generates false-positive errors in the logs during account template updates.

Resolution

• Defect ID: DE664423
• Fix Name: HF_DE664423.zip

If you require this fix, please contact Broadcom Support and reference Defect DE664423.

Additional Information

This fix was validated in environments where Azure accounts templates are updated through the user console. It prevents the LdapNamingException from being logged when members already exist in the modified property.