How to set account Expires on AD endpoint via policy express etadsexpires
search cancel

How to set account Expires on AD endpoint via policy express etadsexpires

book

Article ID: 92367

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction



 I need to know what syntax does the AD connector expects for the AD accountExpires attribute.. I tried the nano seconds approach and I had a ticket was told that the format is yyyy-MM-ddTHH:mm:ss.SSS. I tried numerous variances all failed. What is the correct syntax and how should it be presented?

Environment

Release:
Component: IDMGR

Resolution

create a PX of type UI that fetched the value of accountExpires from AD. The following value cam back: 2018-05-04T09:00:00. So I modified the the PX according to the syntax and I hard coded a date to validate whether it works or not. I used 2018-06-11T10:00:00, and it worked. I then modified the PX to add 30 dates to the date. This was failing.
Regardless of that date format I used (yyyyMMdd, MM/dd/yyyy, and ...) The error produced was invalid date syntax. all of the syntaxes I used were from the available options in the dropdown on the PX.

I then simply created a blth that added 30 days to the date. This value then got fed into the PX and everything worked...