Well my problem is we have a custom process and custom forms for doing the AS from AD to IdM so I know I am running into trouble there. I think my problem is with the form because AS used to work until someone edited our form. Right now when it creates new accounts it does not create an error. But when it attempts to update an existing account it throws the blank identity error. I am thinking it is having trouble contacting the resource looking for the accountId or looking at the right CN.