2995005 - Full repository object is failing when using ICM LDAP

Full repository object is failing when using ICM LDAP. When switching back to regular LDAP (not ICM), there are no problems.

1. SLG1 error:
IDM connection error; internal error

2. Sync error:
Role sync failed with errors

3. Function LDAP_READ catches exception from LDAP_SEARCH call:
CX_LDAP_CLIENT_OPEN_SERVER_ERR
LDAPRC 4

4. No data is coming through
Cannot perform read operation

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP Access Control 12.0

ICM LDAP plugin LDAP_READ LDAP_SEARCH LDAP_SEARCH_SCOPE_BASE CL_LDAP_CLIENT 12.0 , KBA , GRC-SAC-ARA , Access Risk Analysis , How To