CV0-003 · Question #326
Company A has just implemented a SaaS-based cloud storage solution. The SaaS solution provides services for both commercial and personal use. The IT department has been tasked to migrate all the on…
The correct answer is A. The automation task is misconfigured. Systematic 'unable to create account' errors during IAM-driven provisioning most likely indicate a misconfiguration in the automation task, such as incorrect API parameters, field mappings, or authentication settings.
Question
Company A has just implemented a SaaS-based cloud storage solution. The SaaS solution provides services for both commercial and personal use. The IT department has been tasked to migrate all the on- premises file shares to the SaaS solution with the username being the corporate email address. The IT department is currently using am IAM solution to provision the accounts in the SaaS solution. Upon execution of the account creation process, the IT department is receiving multiple "unable to create account" alerts. Which of the following is the MOST likely cause?
Options
- AThe automation task is misconfigured
- BThere is a false positive due to lack of testing
- CThere are compatibility issues between SaaS and IAM
- DThe user accounts already exist
How the community answered
(48 responses)- A81% (39)
- B6% (3)
- C10% (5)
- D2% (1)
Why each option
Systematic 'unable to create account' errors during IAM-driven provisioning most likely indicate a misconfiguration in the automation task, such as incorrect API parameters, field mappings, or authentication settings.
A misconfigured automation task would produce consistent, repeatable account creation failures across all provisioning attempts, which matches the described behavior of receiving multiple alerts. Errors in the IAM task configuration - such as incorrect SCIM endpoint mappings, malformed attribute values, or invalid API credentials - would cause every account creation request to fail systematically. This is the most likely cause because the automation is newly implemented and has not been validated against the SaaS provider's specific provisioning requirements.
A false positive due to lack of testing would mean accounts are actually being created successfully while alerts fire incorrectly, whereas the described scenario indicates actual provisioning failures.
Fundamental compatibility issues between the SaaS and IAM systems would typically be identified during initial integration design, and most enterprise SaaS solutions support standard provisioning protocols such as SCIM.
Pre-existing accounts could cause isolated errors for some users, but a SaaS platform used for both commercial and personal use would not already have corporate-provisioned accounts for all employees, making this an unlikely cause of widespread systematic failures.
Concept tested: IAM automated account provisioning configuration
Source: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works
Topics
Community Discussion
No community discussion yet for this question.