pavolgocal (Customer) to rsaSFDCadmin (RSA): asked a question.

June 12, 2023 at 11:54 AM
Active Directory - clear attribute with multiple values
Hello guys,

when AD account is disabled, we need to clear attribute "showInAddressBook".

I am familiar with "remove_attributeName" syntax for clearing the AD
Attribute, where the value of "remove_attributeName" must be the same as it is
in AD to clear the attribute. But when the attribute has multiple values, like
this:

![pavolgocal_1-1686570552206.png](https://community.rsa.com/t5/image/serverpage/image-
id/420727i8215C851062A3B3B/image-size/medium?v=v2&px=400)



And I collect the attribute values, IGL collects only 1 of 5 values (in this
case the last one):

![pavolgocal_2-1686570602628.png](https://community.rsa.com/t5/image/serverpage/image-
id/420728iAC52DA80EEA8CD69/image-size/medium?v=v2&px=400)

how can I clear the AD showInAddressBook attribute when there are multiple
values?

Thank you for the help.
  • 1 answer
  • 315 views

  • TimWillemstein2 (Customer)

    Not sure if this still works (it did in older versions), but I remember that
    if you just provision any value to a multi value attribute without the add_
    syntax it will clear all the rest of the stored multivalues (maybe remove
    without the remove_ might also just clean up the whole attribute). Than you
    could first provision some dummy value or maybe even '' as value for the
    multivalues attribute.
    Selected as Best

  • TimWillemstein2 (Customer)

    Not sure if this still works (it did in older versions), but I remember that
    if you just provision any value to a multi value attribute without the add_
    syntax it will clear all the rest of the stored multivalues (maybe remove
    without the remove_ might also just clean up the whole attribute). Than you
    could first provision some dummy value or maybe even '' as value for the
    multivalues attribute.
    Selected as Best

Don't see what you're looking for?