We noticed that the account template synchronization is failing and we need to determine how to fix it. We've attempted to sync from the Provisioning Manager and from the Identity Manager UI. Both resulting in the same issue.
There can be multiple reasons for this error message. To verify further you need to review either the ETATrans logs or the View Submitted Tasks from the Identity Manager User Interface. Usually the cause is that it's looking for something that doesn't exist on the endpoint.
Under the View Submitted tasks you may see an error message like this:
Unable to set Group Membership Attribute: memberOf
Group-Membership modification error.
ADD (rc=32) Group: GroupName
Which explains which group it's looking for that is no longer valid. Once the AD team resolves the issue with the missing group the sync should work correctly.