Problem
User is not synced to the id-broker due to school exists
On the ID-Broker Provisioning-api
2026-07-20 14:23:24 INFO [IDBrokerPerSAUserDispatcher(univention).do_create_or_update:263] User does not exist on target system, creating it.
2026-07-20 14:23:24 INFO [IDBrokerPerSAUserDispatcher(univention).do_create:303] Going to create user 'c.schein' ('186f82ea-10bf-1040-9f9a-6da32b1d30b5')...
2026-07-20 14:23:29 INFO [IDBrokerPerSAUserDispatcher(univention).create_school_if_missing:119] Creating school 'sun1a'...
2026-07-20 14:23:29 ERROR [OutQueue(univention).handle:575] [35c7df7a53] Error HTTP 409 (Conflict) creating School {'display_name': 'Univention Support',
'id': '1d4f5d5c-e799-103f-88c5-ff9e1692ac62',
'name': 'sun1a'}.
Traceback (most recent call last):
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/id_broker_client.py", line 399, in _create
new_obj = await self._request("post", request_id=request_id, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/id_broker_client.py", line 566, in _request
res = await meth(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/provisioning_api/api_client.py", line 192, in __call_api
raise e
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/provisioning_api/api_client.py", line 185, in __call_api
response_data = await self.request(
^^^^^^^^^^^^^^^^^^^
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/provisioning_api/rest.py", line 219, in POST
return (await self.request("POST", url,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/var/lib/univention-appcenter/apps/ucsschool-id-connector/conf/plugins/packages/idbroker/provisioning_api/rest.py", line 176, in request
raise ApiException(http_resp=r)
idbroker.provisioning_api.exceptions.ApiException: (409)
Reason: Conflict
HTTP response headers: <CIMultiDictProxy('Date': 'Mon, 20 Jul 2026 12:23:29 GMT', 'Content-Length': '27', 'Content-Type': 'application/json', 'x-request-id': '35c7df7a539a47cb93df9e5f204729f
f', 'Access-Control-Expose-Headers': 'X-Request-ID', 'Set-Cookie': 'UNIVENTION_ID_BROKER_PROVISIONING_APIS_SERVERID=provisioning-api2; path=/')>
HTTP response body: {"detail":"School exists."}
Investigation:
The user has the following attributes:
ucsschoolSchool: sun1
ucsschoolSchool: sun1a
ucsschoolSourceUID: users-sun1
ucsschoolRole: teacher:school:sun1a
ucsschoolRole: teacher:school:sun
th ou exists on the id-broker, but was completly empty, so no users or groups in it.
Solution:
Remove the ou via udm on the broker. Only retrigger of the user did not help, but a resync of the complete ou solved the issue.