Version 7.1 patch 3 and 4
Oracle 12.c
Our Employee Rule is suppose to create the account in Active Directory if the account does not exist when adding to groups.
Example:
Add USER to group, CREATE USER (suppose to be first).
However, even though the workflow says the creation is complete, the account is not created.
No errors in the AFX-Conn_AD logs, even in DEBUG - so it never gets to the AD connector.
The resulting workflow shows an empty transition.
transitional line does show when un-checking
Even though the Create Account decision is fulfilled, it does not create the account.
No errors. No permission errors. It does not even try to get to AD.
I have changed groupings.
I do not know when this started - but did not have this issue in 7.1.1
The resolution was to reset the "group by" to user in the AD fulfillment.
Why was it set to group?
Because we are doing our first Group Review, and the option to remove an account from a group did not go to AFX with "group by group".
So we resolved one issue to create another.
It would be great to have the option to change to workflow for Group Removal Fulfillment or fix the remove account failure when the "group by" is set to user.