0 votes

Hello,

We encoutered an issue with Adaxes in default configuration.

We are mainly using Adaxes for its REST API, to automate identity lifecycle with our HRIS.

We tried to update sn field for some users via the API, and we ended with broken UPN: all users for which we changed the sn field got their UPN automatically updated to firstname.lasname in a broken way (caps, spaces, accents, etc. still there).

Why did our UPN got updated when we did a SN change? Is it related to Built-in Property Patterns that got enforced even on an API REST attribute change?

If so how to disable it?

by (220 points)

1 Answer

0 votes
by (228k points)

Hello,

For the requests performed via Adaxes REST API, the corresponding property patterns, business rules, etc. apply. Most probably, that is why you got UPNs updated. For details, you can check Adaxes logs: https://www.adaxes.com/tutorials_ActiveDirectoryManagement_ViewADOperationsPerformedViaAdaxes.htm.

If you do not want business rules to trigger and property pattens to apply, you can disable or delete them: image.png

0

It worth a warning in the REST documentation… I wasn't expected those default patterns, which are set by default, without any match to the organization policy, (and poorly written for people with accent and spaces in their names), would apply to an API call.

Thanks for the answer…

0

Hello,

Out of the box, there are no property patterns or business rules that change the UPN property when the sn property is updated. It can only happen if you update the sAMAccountName property. If UPN gets updated when you change only the sn property, there is some custom property pattern or business rule that does the change.

Related questions

0 votes
1 answer

I'm looking to find any Python examples of using the REST API. An Internet search didn't turn anything up.

asked Nov 25, 2021 by swengr59 (60 points)
0 votes
1 answer

Hello, I am trying to create a custom command that handles the process of converting a user account for a temp to a FTE. This needs to: 1. move the user to a new OU. 2. change ... to "xxx" OU Set 2: Always --Modify the user: set employee type to...... etc.

asked Jul 26, 2013 by DFassett (710 points)
0 votes
0 answers

Hello We are using the REST API with the Business Unit method to get all our users in once, and it works really well, the API return around 150 in a second when ... proper way with Adaxes REST API to read the current expiration time for all accounts? Thanks

asked Jun 25 by ygini (220 points)
0 votes
1 answer

Hello! We are currently trying to use the REST API to search for all group objects in our domain, but the search result is only returning 1000 objects. We tried supplying a ... the request. Is there a way to retrieve more than 1000 objects using the REST API?

asked Feb 16 by KelseaIT (320 points)
0 votes
1 answer

Is it possible to add multiple members to a group in a singe call to the REST API? The example code only shows a single member. What would the data structure look like in that case?

asked Dec 13, 2021 by swengr59 (60 points)
2,807 questions
2,541 answers
6,615 comments
65,286 users