I believe if you go to your resource tab and right click on your AD resource and select edit->edit identity template, you will see that you are using the IdM variable named login in the template. If this is true, then you must make sure that IdM variable has a value in order to provision this resource.
You can specify the unique resource accountId manually in your userForm by creating another Field like this, the logic inside the concat is just for example purposes:
<Field name='accounts[AD].identity'>
<Expansion>
<block>
<concat>
<ref>global.firstname</ref>
<s> </s>
<ref>global.lastname</ref>
</concat>
</block>
</Expansion>
</Field>
That will override the identity template which I think is incorrect in your deployment, I would also check the identity template for AD and see whether $login$ is being mentioned. If you don't want to change your identity template and don't want to use the .identity example above then create a field called login on your userForm and put your resource accountId creation logic in there.
Hello,
I want to do the same, I already defined a field in my input form but I'm still getting the errror:
Missing user attribute 'orgUnits' used in identity template for resource 'AD'
The Definition is:
<Field name='orgUnits'>
<Expansion>
<block trace='true'>
<ref>ous</ref>
</block>
</Expansion>
</Field>
Where 'ous' is a variable with the organizational units.
The Identity Template for the AD resource is:
CN=$lastname$\\, $firstname$ ($accountId$),$OrgUnits$,DC=MyCompany,DC=com
What could be wrong?
Thanks