25,080 questions
Facing issue related to Attribute Mapping in AD Entra Cloud Sync from SAP SF to onprem AD
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 81%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Sandeep K
0
Reputation points
Hi Microsoft Support/Everyone,
Currently, I'm working on integration with SAP SuccessFactors to On prem AD in Windows server via Azure Entra ID Cloud Sync agent. Here, I'm struck with an issue while provisioning a user in On prem AD that exists in SF where getting the below error that is attached in the image.
Error Code:
hybridSynchronizationActiveDirectoryCannotCalculateDistinguishedName
Error Message:
The distinguished name could not be composed. Either or both of the 'cn' and the 'parentDistinguishedName' property values are missing.
Troubleshoots performed:
- I have removed the cn from the attribute mappings from Cloud Sync agent.
- I have given a default name if the value is null for the cn attribute
- There is no attribute named parentDistinguishedName is present in the attribute mapping.
Please let me know, if any other thing I'm missing out and any of you have faced this issue on the same.
I have performed the implementation by following this article from Microsoft Learnings.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Sandeep K 0 Reputation points
2025-04-01T06:51:03.1+00:00 Attribute Mapping:
Error:
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator2025-04-04T03:29:06.4566667+00:00 Hi @Sandeep K
It's looks the attribute parentDistinguishedName is required in the app provisioning try to add the parentDistinguishedName in attribute mapping. below is the example for attribute mappings
https://learn.microsoft.com/en-us/entra/identity/saas-apps/workday-inbound-tutorial#:~:text=contoso%2CDC%3Dcom%22)-,parentDistinguishedName,-Create%20%2B%20update-,parentDistinguishedName,-Create%20%2B%20update) -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 74%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator2025-04-07T10:06:02.25+00:00 Hello @Sandeep K,
Following up to see if the above provided suggestion was helpful. And, if you have any further query and questions, please do let us know.
-
Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator
2025-04-08T11:58:22.77+00:00 Hello @Sandeep K
Following up to see if the above provided suggestion was helpful. And, if you have any further query and questions, please do let us know.
-
Sandeep K 0 Reputation points
2025-04-27T05:46:22.59+00:00 Dear @Jyotishree Moharana
This issue has been fixed and thanks for your support. I'm facing a new issue in updating the CN common name attribute in AD. I have created an another new query title "CN (Common Name) attribute from SAP SuccessFactors is not updating in the on-prexmises Active Directory via the Azure AD Connect Cloud Sync Agent"
Can you please go through these and provide your observations will be really appreciated!
Sign in to comment
Sign in to answer