This HelloID Service Automation Delegated Form provides updates for user principal name and email on an AD user account and AFAS employee. The following options are available:
- Search and select the target AD user account
- Show basic AD user account attributes of the selected target user
- Enter new values for the following AD user account attributes: UserPrincipalName and EmailAddress
- The entered UserPrincipalName and EmailAddress are validated
- AD user account [UserPrincipalName and EmailAddress] and AFAS employee [EmAd] attribute are updated with new values
- Writing back [EmAd] in AFAS will be skiped if the employee is not found in AFAS
| Version | Description | Date |
|---|---|---|
| 1.0.0 | First release | 2023/10/24 |
- Description
- Versioning
- Table of Contents
- All-in-one PowerShell setup script
- Post-setup configuration
- Manual resources
- Add another systems to update
- Getting help
- HelloID Docs
The PowerShell script "createform.ps1" contains a complete PowerShell script using the HelloID API to create the complete Form including user-defined variables, tasks and data sources.
Please note that this script assumes none of the required resources do exist within HelloID. The script does not contain versioning or source control
Please follow the documentation steps on HelloID Docs in order to set up and run the All-in-one Powershell Script in your own environment.
After the all-in-one PowerShell script has run and created all the required resources. The following items need to be configured according to your own environment
- Update the following user-defined variables
| Variable name | Example value | Description |
| ADusersSearchOU | [{ "OU": "OU=Disabled Users,OU=HelloID Training,DC=veeken,DC=local"},{ "OU": "OU=Users,OU=HelloID Training,DC=veeken,DC=local"}] | Array of Active Directory OUs for scoping AD user accounts in the search result of this form |
| AFASBaseUrl | https://yourtennantid.rest.afas.online/profitrestservices | The URL to the AFAS environment REST service |
| AFASToken | < token>< version>1< /version>< data>yourtoken< /data>< /token> | The AppConnector token to connect to AFAS |
This Delegated Form uses the following resources in order to run
This Powershell data source runs an Active Directory query to search for matching AD user accounts. It uses an array of Active Directory OU's specified as HelloID user-defined variable named "ADusersSearchOU" to specify the search scope. This data source returns additional attributes that receive the current values for UserPrincipalName/EmailAddress and also split them into a prefix and a suffix for future uses.
This Powershell data source runs an Active Directory query to select an extended list of user attributes of the selected AD user account.
This Powershell data source runs an Active Directory query to validate the uniqueness of the new UserPrincipalName and EmailAddress. Both values are also validated in ProxyAddresses. And will return a "Valid" or "Invalid" text. This text is used for validation in the form.
This delegated form task will update two systems. On the AD user account the attributes UserPrincipalName, EmailAddress and ProxyAddresses will be updated (old Primairy 'SMTP:' will be replaced by a alais 'smtp:'). On the AFAS employee the attributes EmAd will be updated.
It is possible to add another systems to update the UserPrincipalName and EmailAddress by adding them in the task script. It is also possible to send a email with the task script.
If you need help, feel free to ask questions on our forum
The official HelloID documentation can be found at: https://docs.helloid.com/