0 votes

Hello,

We encoutered an issue with Adaxes in default configuration.

We are mainly using Adaxes for its REST API, to automate identity lifecycle with our HRIS.

We tried to update sn field for some users via the API, and we ended with broken UPN: all users for which we changed the sn field got their UPN automatically updated to firstname.lasname in a broken way (caps, spaces, accents, etc. still there).

Why did our UPN got updated when we did a SN change? Is it related to Built-in Property Patterns that got enforced even on an API REST attribute change?

If so how to disable it?

by (240 points)

1 Answer

0 votes
by (292k points)

Hello,

For the requests performed via Adaxes REST API, the corresponding property patterns, business rules, etc. apply. Most probably, that is why you got UPNs updated. For details, you can check Adaxes logs: https://www.adaxes.com/tutorials_ActiveDirectoryManagement_ViewADOperationsPerformedViaAdaxes.htm.

If you do not want business rules to trigger and property pattens to apply, you can disable or delete them: image.png

0

It worth a warning in the REST documentation… I wasn't expected those default patterns, which are set by default, without any match to the organization policy, (and poorly written for people with accent and spaces in their names), would apply to an API call.

Thanks for the answer…

0

Hello,

Out of the box, there are no property patterns or business rules that change the UPN property when the sn property is updated. It can only happen if you update the sAMAccountName property. If UPN gets updated when you change only the sn property, there is some custom property pattern or business rule that does the change.

Related questions

0 votes
1 answer

I'm looking to find any Python examples of using the REST API. An Internet search didn't turn anything up.

asked Nov 25, 2021 by swengr59 (60 points)
0 votes
1 answer

Hello, I am trying to create a custom command that handles the process of converting a user account for a temp to a FTE. This needs to: 1. move the user to a new OU. 2. change ... to "xxx" OU Set 2: Always --Modify the user: set employee type to...... etc.

asked Jul 26, 2013 by DFassett (710 points)
0 votes
1 answer

Hi, { "criteria": { "objectTypes": [ { "type": "USER", "items": { "type": 1, "items": [ { "type": 0, "property": "accountDisabled", "operator": "eq" ... ": { "isDisabled": true, Please share the right request JSON to get the required result. Thanks, Lohith

asked Oct 3 by lom (20 points)
0 votes
0 answers

Hello We are using the REST API with the Business Unit method to get all our users in once, and it works really well, the API return around 150 in a second when ... proper way with Adaxes REST API to read the current expiration time for all accounts? Thanks

asked Jun 25, 2022 by ygini (240 points)
0 votes
1 answer

Hello! We are currently trying to use the REST API to search for all group objects in our domain, but the search result is only returning 1000 objects. We tried supplying a ... the request. Is there a way to retrieve more than 1000 objects using the REST API?

asked Feb 16, 2022 by KelseaIT (320 points)
3,567 questions
3,258 answers
8,271 comments
547,929 users