Manager attribute from AD and to AD

Question

Hello Experts,
I am working with AD-IDM implementation.
I am facing two problems here:
1. Issue in getting Manager attribute of the users from HR system onto IDM via initial load and
2. Issue in assigning the Manager attribute to a user from IDM while creating a new user on AD
In case 1, I am simply trying to pass the manager in HR system to attribute MX_MANAGER as
in pass 'to identity store' ->  MX_MANAGER = %manager%
For this, the IDM throws an error as "Entry reference value is not numeric when storing attribute MX_MANAGER=xyz"
In case 2, while creating a new identity assigning the AD privilege, I am trying to assign the manager to that new AD user. But it fails to create a user on AD as the manager attribute value comes with an error "CONSTRAINT_ATT_TYPE"
I know that the manager value on AD resides in DN format, but not sure how to resolve that to use the same for purposes.
Could you please suggest on the above issues.
FYKI - Version: IDM 7.2
Many thanks in advance!
Naveen

Answer 1

Hi Naveen,
In order to start writing scripts, you should know what are the tables/views to query for getting the required information.
I strongly recommend you to go through the the blog IDM SQL Basics #1: Queries against the Identity Store by  Per Krabsetsve
Anyways I am writing down the sample scripts for your reference, which you can make use of.
Let me know for any further queries.
1. For getting the MSKEY of the user from MSKEYVALUE
// Main function: z_sap_getMskeyForMskeyvalue
function z_sap_getMskeyForMskeyvalue(Par)
  var msKey = "";
  msKey = "select distinct mcMSKEY from idmv_entry_simple where mcMSKEYVALUE='"+Par+"'";
  msKey = uSelect(msKey);
  return msKey;
2.  For gettting the DN of the Manager with MSKey as the input to the script.
// Main function: z_sap_getManagerADDN
function z_sap_getManagerADDN(Par)
   var msKey = Par;
  var managerADDN = "";
  managerADDN = "select avalue from idmv_value_basic where MSKEY="+Par+" and AttrName='ACCOUNTIDECAD'";
  // in the above select query ACCOUNTIDECAD is my AD account attribute. In your case it is ACCOUNT<AD Rep Name>
  managerADDN = uSelect(managerADDN);
  return managerADDN;
All the best !!
~ Krishna.