How to build SAMAccountName using Expression Builder?

Question

How to build SAMAccountName using Expression Builder?

Rick Angel 216

We are implementing an Azure AD enterprise app "Workday to AD User Provisioning". It should create, update, and delete user information in on premise AD.

I am having trouble populating the SAMAccountName attribute using the Azure AD Expression Builder. What would be the correct syntax to take the first character of Workday attribute FirstName then append the entire value in LastName? These Workday attributes map to AD attributes givenName and Surname respectively, but Expression Builder is looking for the Workday attributes. Also would like to make SAMAccountName all lower case if possible.

Example: FirstName = John and LastName = Smith should produce SAMAccountName = jsmith.

Thanks for your help.

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2023-03-24T05:10:12.25+00:00

@Rick Angel Thank you for reaching out to us, let me research on your ask and revert back.
Rick Angel 216 Reputation points

2023-03-24T13:18:23.5666667+00:00

Yesterday I was able to use this:

ToLower(Append(Mid([FirstName], 1, 1), Mid([LastName], 1, 99)), )

to produce SAMAccountName "jsmith" in the Expression Builder tool.

However, when trying to provision the user account for John Smith the process fails on the last step with this error.

"Failed to create Worker '******@company.com' in On Premises Active Directory"

Error code: HybridSynchronizationActiveDirectoryDistinguishedNameBadSyntax

Error message: UpdateForUnconnectedEntry

So now the attribute looks correct visually, but it must be missing some DN formatting, and the AD user account never actually gets created.

Your answer

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2023-03-24T05:10:12.25+00:00

@Rick Angel Thank you for reaching out to us, let me research on your ask and revert back.
Rick Angel 216 Reputation points

2023-03-24T13:18:23.5666667+00:00

Yesterday I was able to use this:

ToLower(Append(Mid([FirstName], 1, 1), Mid([LastName], 1, 99)), )

to produce SAMAccountName "jsmith" in the Expression Builder tool.

However, when trying to provision the user account for John Smith the process fails on the last step with this error.

"Failed to create Worker '******@company.com' in On Premises Active Directory"

Error code: HybridSynchronizationActiveDirectoryDistinguishedNameBadSyntax

Error message: UpdateForUnconnectedEntry

So now the attribute looks correct visually, but it must be missing some DN formatting, and the AD user account never actually gets created.

Share via

How to build SAMAccountName using Expression Builder?

Your answer