CA Identity Manager: Cannot create AD accounts due to CONSTRAINT_VIOLATION error

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Trying to add provisioning role users to create AD endpoint accounts is failing. Account for Global User on Active Directory Endpoint creation failed with below error:

Connector Server Add failed: code 19 (CONSTRAINT_VIOLATION): failed to add entry eTADSAccountName=userid

Environment

Release:
Component: IDMGR

Cause

A CONSTRAINT_VIOLATION error is an error being returned from your Active Directory. It means that the data being provided to AD is unacceptable in some way. 
 

Resolution

Ensure that all attributes you have set as required in Active Directory are being populated in Identity Manager. If an attribute that is required is not mapped in your account template, or is mapped to a blank value - you will see a constraint violation.