...
Unimportant validation issues are the group description or user first/last name.
| Object type | State | Provisioning run type | Issue | Resolution |
|---|---|---|---|---|
| Group/entity | Insert | Full | Field/attribute is invalid | Object is not provisionable. No memberships will be added until valid. Do not insert |
| Group/entity | Insert | Incremental | Field/attribute is invalid | Same resolution as full. Also do not retry until attributes change on the object or a full sync |
| Group/entity | Update | Full | Field/attribute is invalid | Do not update the attribute on the object. |
| Group/entity | Update | Incremental | Field/attribute is invalid | Same resolution as full. Also do not retry until attributes change on the object or a full sync |
| Group/entity | Delete / Mark unprovisionable | Full / incremental | Field/attribute is invalid | Delete the object if configured to. Invalid data will not stop deletes |
| Membership | Insert | Full / incremental | Group or entity has unimportant validation issue, and is not already in target | Do not insert memberships if the group or entity needs to be in the target and is not valid and is not in the target |
| Membership | Insert | Full / incremental | Group or entity has unimportant validation issue, and is already in target | Insert memberships if the group or entity needs to be in the target and is not valid and is in the target |
| Membership | Insert | Full | Group or entity has important validation issue | Do not insert the membership. The membership is not provisionable |
| Membership | Insert | Incremental | Group or entity has important validation issue | Same resolution as full. Also do not retry until attributes change on the object or a full sync |
| Membership | Delete | Full / incremental | Group or entity has any validation issue | Delete the membership. Invalid data will not stop deletes |
Reporting on validation errors
Capture the errors and have them available on various UI screens for reporting / troubleshooting
See also