Please, try to provide some more extracts from your MDUCHGLB_FAILEDOBJS table : - do you spot any LDAP objets attributes (Name, ID, Description etc.) having "unexpected" values ? For instance, using this synchro code, I had an issue once dealing with Description fields values (extracted from the LDAP directory) which had (balanced) single quotes inside the string (Desc= Profile 'Developers'). This caused a large havoc in the metadata XML request generating code since the code did not protect enough the attributes values (XML attributes use single quotes as boundaries). BTW, to enable the debugging logs in verbose mode, I had to modify some of the Macros : if you run your code on a Unix/Linux machine, be aware that these technical logs rely only on a backslash delimiter for files location and were tested on Windows only ... :smileyplain: Another thing : - in metadata, in the SMC User Manager, have you checked the synchronized objects - Users AND/OR Groups or Roles "External Identity" associations ? More specifically, if you click on "External Identity", do you see any "Identifier" value ? or is it still empty ?
... View more