Ask MY-Community
Olivier JAOUEN
Olivier JAOUEN

Multiple admin AD accounts for 1 identity

Resolved

Hello,

I would like to provision multiple admin AD accounts for 1 identity and 1 application.
Is it possible?

Import, export & provisioning
1 reply
Best reply by Alan DAYI

Hello,

Yes, it is possible to provision multiple AD accounts (e.g., admin accounts) for the same identity, even through a single application. This depends on the DN construction logic.

In your case, you are encountering an error because the DN is retrieved from SHADOW.distinguishedName. This means that provisioning can only manage one account per identity (one existing DN = only one possible account).

Therefore, this logic is not suitable for provisioning multiple remote accounts.

To create multiple AD admin accounts, you need to use a logic independent from "SHADOW", by constructing a DN based on:

  • a role (RightGrant)

  • a different prefix (adAdminPrefixRole)

  • a dedicated OU container

  • and a unique CN

This way, each role generates a different DN, allowing you to create a distinct AD account for the same identity.

Regards

View original