I’ve recently started working with Forefront Identity Manager (FIM) and had things swimming along pretty well with getting users provisioned into AD. A requirement came up to provision users into an OU based on their Office Location attribute.

As soon as I made that change, I started getting the error “The DN must be set before calling CSEntry.CommitNewConnector”.

I checked the Lineage, and the Office Location value was set, so I was very confused.

After way too long, I realized I needed to add an attribute flow from the FIM MA to the OnPremise AD MA to flow OfficeLocation to officeLocation. I had to do this in the Synchronization Service Manager. It was already set in the sync rule.

Having to set attribute flows in two places is going to take some getting used to. I hope this will help someone else.