User import with blank UPN name will fail

Published: 20 Apr 2016
Last Modified Date: 29 Aug 2017


User import with blank UPN name in Active directory will fail with following error message:
2016-04-18 08:55:30.115 -0700 (Default,hxu,pc3Y9oBTZWl2vABRYI49l60zGoCMXCPi,VxUDcgoXbgsAAfEcedYAAAFd) catalina-exec-54 : ERROR com.tableausoftware.api.webclient.util.BatchedActionExecutor - Exception raised by call target for key [username]: String index out of range: -1
java.lang.StringIndexOutOfBoundsException: String index out of range: -1
    at java.lang.String.substring(
    at com.tableausoftware.winldap.WinLdapUser.<init>(
    at com.tableausoftware.winldap.WinLdapSearchService.findUser(
    at com.tableausoftware.domain.user.service.SyncWithActiveDirectoryLogic.syncUser(
    at com.tableausoftware.domain.user.service.UserManagementService.importUserFromActiveDirectory_aroundBody80(
    at com.tableausoftware.domain.user.service.UserManagementService$
    at org.aspectj.runtime.reflect.JoinPointImpl.proceed(


  • Tableau Server 9.2.2 - 9.2.6


There are 2 possible solutions:

Option 1

Upgrade to 9.1.9 or 9.2.7.

Option 2

Manual workaround: Fill in the blank UPN (User Principal Name formatted as an email address) for users in AD and then sync the group.


New users with empty UPN cannot be imported
Did this article resolve the issue?