Invalid JSON data when we set Exchange mailbox Message Delivery Restrictions to accept messages only from certain senders via PolicyXpress Policy

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

We want to set the Exchange Mailbox Message Delivery Restrictions with "Only senders in the following list", and we understand that we need to set the sender DN on eTADSauthOrig account attribute, however, when we use PolicyXpress policy to apply account DN on eTADSauthOrig attribute, we get Invalid JSON data error.

Environment

Release:
Component: IDMGR

Cause

PolicyXpress Policy expects a JSON string for eTADSauthOrig attribute, instead of a distinguished name (DN)

Resolution

When you use PolicyXpress policy to change eTADSauthOrig attribute, the PolicyXpress expects a JSON string for eTADSauthOrig attribute.

The following are a few examples
1. An account in OU=TestOU container:

    {"name":"Account=testuser,ADSOrgUnit=TestOU,EndPoint=TestADS,Namespace=ActiveDirectory,Domain=im,Server=Server"}

2. An account in CN=Users container:

   {"name":"Account=testuser,ADSContainer=Users,EndPoint=TestADS,Namespace=ActiveDirectory,Domain=im,Server=Server"}