Hi,
I'm currently using the web service createChangeRequest for using the OOTB AFX for account actions(creation/activation/deactivation/etc...).
My logic is when adding a specific entitlement "Create Account", it will precalculate some attributes and push them through the API to generate create account request and It's working pretty well when I have all values defined. These attributes are mapped to the afx by the prefix "AFXCUSTOM_" and defined in the mapping of the capabitility. So for example manager dn attribute is map to ${Workflow.Managerdn}.
We have some case where for example, the manager is not defined or doesn't have an AD account so the value will be null. If it's null, the AFX seems trying to send "[]" to this attribute and on Active Directory, manager must be a DN or not set so I get an constraint violation and cannot create an account if no manager. (checked by setting the afx to debug)
How can I define the afx to not send this attribute if he is empty ?
You can find below the attribute of a current workflow running, the afx mapping and the afx log(critical and personnal infos has been hidden) :
Sorry for taking so long to get to you, but I would suggest you log this case a defect with support
Just for the sake of my testing, does the SQL statement you use to select AFXCUSTOM_WORKFLOW_MANAGERDN return one row with null value (Example: User does have a supervisor but the supervisor has no DN, so the join returns one row with null value) ?
Or does it return no rows at all (Example: User does not even have a supervisor, so join results in no rows)?