Using UPN instead of Distinguished name for Manager reference?

Question

Hi,

We are in process of implementing the User Creation/Deletion & Add/Remove Users to Group.
We have been using the Canonical name for referencing the ADGroup/OU Unit and Users with the Distinguished name.

Question:
we want to use ObjectGuid instead of the Distinguished name, I wonder about the possibility?

In this below example, we aim to use GUID/UPN over the Distinguished name in Manager attribute.

for example:
<ProcessRequest xmlns="http://softerra.com/adaxes/spmlwebservice">
<requestElement >
<addRequest returnData="everything" targetID="all domains" xmlns="urn:oasis:names:tc:SPML:2:0">
<containerID ID="{ObjectGuid}" />
<data >
<attr name="cn" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTFN17 TESTLN17</value>
</attr>
<attr name="givenName" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTFN17</value>
</attr>
<attr name="sn" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >TESTLN17</value>
</attr>
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >CN=PRDTESTFN9 PRDTESTLN9,OU=Users,OU=Company,DC=Company,DC=net</value>
</attr>
<attr name="objectclass" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value >user</value>
</attr>
</data>
</addRequest>
</requestElement >
</ProcessRequest>

Currently, i'm getting below error response when i use UPN in Manager Name Reference attribute.

<ProcessRequestResponse xmlns="http://softerra.com/adaxes/spmlwebservice">
<ProcessRequestResult>
<addResponse status="failure" error="customError" xmlns="urn:oasis:names:tc:SPML:2:0">
<errorMessage>The name reference is invalid. (Server: company.net)</errorMessage>
</addResponse>
</ProcessRequestResult>
</ProcessRequestResponse>

Thanks,
Aravindh

Answer 1

Hello Aravindh,

Yes, it is possible to use the manager GUID instead of the distinguished name. The GUID should be specified in the following format:
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value>&lt;GUID=855ED5AB-960A-47EF-941E-B3D4AE2E8163&gt;</value>
</attr>

Comments

Thanks for the response!.
however, we only have the email id/UPN and when i tried, it throws me
...
<attr name="manager" xmlns="urn:oasis:names:tc:DSML:2:0:core">
<value ><UPN=PRDTESTFN19.PRDTESTLN19@company.net></value>
</attr>
...

Response:
<ProcessRequestResponse xmlns="http://softerra.com/adaxes/spmlwebservice">
<ProcessRequestResult>
<addResponse status="failure" error="customError" xmlns="urn:oasis:names:tc:SPML:2:0">
<errorMessage>The parameter is incorrect. (Server: company.net)</errorMessage>
</addResponse>
</ProcessRequestResult>
</ProcessRequestResponse>

Thanks

---

Hello Aravindh,

There is no possibility to use the UPN property in this manner, only the GUID or SID of the desired manager.