Symantec IGA

Hi,

I am trying to provision two Active Directory Endpoints with Two provisioning Roles and Account Templates. When I try to assign Active Directory Groups for User in end point I am getting "ERROR: No Accounts Found". Please find the policy details below.

Policy Name: Assign AD Group

Event: SyncProvisioningRoletoAddAccountsEvent

Data: Accounts -> Accounts -> Active Directory

Action: Rule: Assign Groups -> ADSgroup

Kindly suggest on the event to trigger the policy.

Thanks,

Murali

Events in IM are not synchronous with the actual provisioning actions taken by Provisioning Server and Connector Server. You likely have the event firing when IM sends the "create" message off to IMPS, but there hasn't been enough time to actually create the accounts yet.

We found that the only way to reliably work with Active Directory accounts in this way was to have the "Create User" task set to "Synchronize on every event."  The PX Policies are tied to the task completion (and / or failure) instead of the specific event.  This way, the policy fires reliably after the account is created and re-synchronized.