CA Identity Manager Account Synchronization with Account Template produces error

Document ID : KB000092802
Last Modified Date : 24/04/2018
Show Technical Document Details
Issue:
We noticed that the account template synchronization is failing and we need to determine how to fix it. We've attempted to sync from the Provisioning Manager and from the Identity Manager UI. Both resulting in the same issue. 
Resolution:
There can be multiple reasons for this error message. To verify further you need to review either the ETATrans logs or the View Submitted Tasks from the Identity Manager User Interface. Usually the cause is that it's looking for something that doesn't exist on the endpoint.

For Example:
Under the View Submitted tasks you may see an error message like this:
Unable to set Group Membership Attribute: memberOf
 Reason: 
 Group-Membership modification error.
ADD (rc=32) Group: GroupName

Which explains which group it's looking for that is no longer valid. Once the AD team resolves the issue with the missing group the sync should work correctly.