GRC x LDAP - When Manager name is not unique?

[andreia_ferreira]

Dear experts,

LDAP is configured as a data source for search and detailed user in GRC Access Control.

Everything is working fine except... when manager name in LDAP is not unique, see print screen bellow:

• Issue: Access Request screen: GRC should fetch manager ID 7002115 instead of 2006808

• In LDAP transaction this is the result for manager search:

• But in LDAP there are three users with this same name (CN attribute)

As a result in access request screen GRC fetch manager 2006808 instead of 7002115 😞

• Field mapping for actions 3 and 4:
• 
• 

Connector atributes

Well as mentioned before our issue happens when manager name is not unique in MS AD, and GRC fetches other manager than what is expected. Is it something that is being missed?

[former_member695876]

Are you on GRC 10 or GRC 12, please specify SP.

Also check below note

2369163 - UAM : Wrong manager ID returned from LDAP when multiple users with same name

Note applicable for GRC 10, GRC 10.1

[Monsores]

Hi Andreia.

If the note mentioned by Sandeep doesn't solve your issue, please check and update your post because I believe there are some images missing.

But, as a general rule, if multiple results come from the GRC query in LDAP for a data source query, the first one will be taken.

Regards,

Marcelo Monsores