Accountguid update for the AD users in idm

Question

Hi
We have the users in idm with Active Directory resouce assigned, but with out accountguid in the resource info.
for fixing them we are writing process to reprovision. But we are not able to set accountguid for the users.
<Action id='1' name='Get End User View' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='getView'/>
<Return from='view' to='user'/>
get objectGUID from AD
<set name='user.accounts[ActiveDirectory].accountGUID'>
<concat>
                         <s><GUID=</s>
                         <ref>objectGUID</ref>
                         <s>></s>
                    </concat>
</set>
<Action id='0' process='Provision'>
<Argument name='op' value='reProvision'/>
          <Argument name='user' value='$(user)'/>
Can any one please help me this
Thanks

Answer 1

Hi
Some of our user's aready exists in AD before creating the users in idm.
When our process create the users in idm it is just linking the users with AD account using below code and creating in idm, But idm AD adapter is not auotmatically putting the GUID. So we need to manully set those users.
<set name='user.accounts[ActiveDirectory].accountId'>
<ref>str_existentADAccount</ref>
</set>
<set name='user.accounts[ActiveDirectory].identity'>
<ref>str_existentADAccount</ref>
</set>
<Activity id='11' name='Provision'>
<Action id='0' process='Provision'>
<Argument name='op' value='provision'/>
<Return from='applicationError' to='error'/>
<Return from='userCreated' to='userCreated'/>
</Action>
Please let us know if we need to change any thing.
Thanks