CA Identity Manager: Cannot create AD accounts due to CONSTRAINT_VIOLATION error

Document ID : KB000097749
Last Modified Date : 30/05/2018
Show Technical Document Details
Issue:
Trying to add provisioning role users to create AD endpoint accounts is failing. Account for Global User on Active Directory Endpoint creation failed with below error:

Connector Server Add failed: code 19 (CONSTRAINT_VIOLATION): failed to add entry eTADSAccountName=userid
Cause:
A CONSTRAINT_VIOLATION error is an error being returned from your Active Directory. It means that the data being provided to AD is unacceptable in some way. 
 
Resolution:
Ensure that all attributes you have set as required in Active Directory are being populated in Identity Manager. If an attribute that is required is not mapped in your account template, or is mapped to a blank value - you will see a constraint violation.