Navigation:  Setting up and running user synchronization >

Errors that can occur in user synchronization

Previous  Top  Next

In situations where synchronization is finished with "Finished with errors" status, you should view the history log details and navigate to "Users with errors" records to check the reason.

 

In the following table, the possible reasons for errors and how to solve them are detailed:

Error

Solution

Repeated user ID

The "user ID" field has a unique value for each user within the system, therefore, one must verify the value mapped to it in the domain configurations and ensure that there are no duplicates and/or conflicting records with the user values already existing in SE Suite.

Leader not found

The leader synchronization option is enabled; however, the user leader is not contained in the user list for synchronization. Check the domain configuration and adjust the "Filter" and "Directory" fields so that the user is imported with its leader or enable the "Ignore errors of leader not found" option for the user to be imported even if the leader has not been found.

AD "distinguishedName" attribute is null

This message is only displayed when leader synchronization is enabled, and the attribute used to identify the record was not found. It is possible that the directory service does not have the attribute enabled or the service is of OpenLDAP type, from which the system does not support leader synchronization.

There is a circular reference among leaders

SE Suite does not allow a user to be a leader of his/her leader, or that this cycle is created among more users (The leader of B, B leader of leader C and C of A) during the synchronization process. The user records in the directory service must be adjusted to meet this requirement.

User references himself as his manager

The system does not allow a user to be a leader of himself during the synchronization process with the option to synchronize manager enabled. In this case, you must adjust the user record in the directory service to meet this requirement.

Invalid login

The value mapped to the attribute corresponding to the user login is null, empty or is "admin". In these cases, the user will not be imported, and the invalid login message will be displayed. The user directory in the directory service must be adjusted and the value set for the login needs to be changed.

More than one login record found

This message indicates that a user with the same login already linked to the same domain already exists. The user directory in the directory service must be adjusted and the value set for the login needs to be changed.

Could not add the user to the 'X' department, because it is not active

It is not possible to link a user to an inactive department within the SE Suite. Activate the department or modify the value set for this field in the user record within the directory service.