Account Move/Rename Operation

To enable the account move/rename operation, you must provide the uniqueAccountAttribute value for the configured LDAP server.

For IBM Tivoli Directory Server, the default Unique Account Attribute (UUID) is ibm-entryuuid. If your connector uses a custom UUID attribute, specify that attribute instead. You need to configure this attribute using the following API PATCH request:

Copy 
[
  {
    "op": "add",
    "path": "/connectorAttributes/uniqueAccountAttribute",
    "value": "ibm-entryuuid"
  }
]

Provisioning for Move/Rename Operation

To handle move and rename operations, you need to send special provisioning attributes in an AttributeRequest. The following table lists the special attributes to handle the move and rename operations.

Attribute

Description

AC_NewName

A string attribute that specifies the new name for the user. For example, cn=abc,uid=xyz

AC_NewParent

A string attribute that specifies the new organizational unit (OU) for the user. For example, ou=xyz,dc=pqr,dc=com