Chat now with support
Chat mit Support

Active Roles 8.1.1 - Synchronization Service Administration Guide

Synchronization Service overview Deploying Synchronization Service Getting started Connections to external data systems
External data systems supported with built-in connectors
Working with Active Directory Working with an AD LDS (ADAM) instance Working with Skype for Business Server Working with Oracle Database Working with Oracle Database user accounts Working with Exchange Server Working with Active Roles Working with One Identity Manager Working with a delimited text file Working with Microsoft SQL Server Working with Micro Focus NetIQ Directory Working with Salesforce Working with ServiceNow Working with Oracle Unified Directory Working with an LDAP directory service Working with an OpenLDAP directory service Working with IBM DB2 Working with IBM AS/400 Working with IBM RACF Working with MySQL database Working with an OLE DB-compliant relational database Working with SharePoint Working with Microsoft 365 Working with Microsoft Azure Active Directory Configuring data synchronization with the SCIM Connector Configuring data synchronization with the Generic SCIM Connector Objects and operations supported by the SCIM Connector Example of using the Generic SCIM Connector for data synchronization
Using connectors installed remotely Creating a connection Renaming a connection Deleting a connection Modifying synchronization scope for a connection Using connection handlers Specifying password synchronization settings for a connection
Synchronizing identity data Mapping objects Automated password synchronization Synchronization history Scenarios of use Developing PowerShell scripts for attribute synchronization rules Using PowerShell script to transform passwords

Creating a sync workflow

To create a sync workflow

  1. In the Synchronization Service Console, open the Sync Workflows tab.

  2. Click Add sync workflow.

  3. In the Sync workflow name text box, type a name for the sync workflow being created.

  4. Click OK.

    The new workflow appears on the Sync Workflows tab.

    NOTE: After you created a sync workflow, you must populate it with one or more synchronization steps. For more information, see Synchronizing identity data.

Adding a creating step

This section provides instructions on how to:

  • Connect Synchronization Service to the source Comma Separated Values (.csv) file and target Active Directory domain.

  • Add a new creating step and configure its settings, for example, specify the object attributes to create.

  • Develop a Windows PowerShell script that returns the name of an Active Directory container for created user accounts.

  • Preview a list of user accounts to be created.

To add a creating step

  1. In the Synchronization Service Console, open the Sync Workflows tab, and then click the sync workflow you created in the Creating a sync workflow step.

  2. Click Add synchronization step.
  3. On the Select an action page, select Creation, and then click Next.

  4. On the Specify source and criteria page, click Specify, click Add new connected system, and then step through the wizard to add the sample Comma Separated Values (.csv) file as a connected system:

    1. Use the Connection name box to type a descriptive name for the connection being created.

    2. In the Use the specified connector list, select Delimited Text File Connector. Click Next.

    3. Click Browse to locate and select the sample Comma Separated Values (.csv) file supplied with Synchronization Service. This file is located in the <Synchronization Service installation folder>\Samples folder.

    4. Step through the wizard until you are on the Specify attributes to identify objects page.

    5. In the Available attributes list, select Employee ID, click Add, and then click Finish.

  5. Click Next.

  6. On the Specify target page, click Specify, and then step through the wizard to add the target Active Directory domain as a connected system:

    1. Use the Connection name box to type a descriptive name for the connection being created.

    2. In the Use the specified connector list, select Active Directory Connector. Click Next.

    3. Use the Domain name field to type the FQDN name of the target Active Directory domain. If necessary, adjust other connection settings on this page as appropriate. Click Finish.

  7. Click the down arrow on the button provided next to the Target container option.

  8. In the provided list, click PowerShell Script.

  9. Insert the following script sample into the dialog, and then click OK:

    $userCity = $srcObj["City"]
 switch ($userCity)
{
  "New York" {$container = "OU=New York,OU=Employees,DC=mycompany,DC=com"; break}
  "Amsterdam" {$container = "OU=Amsterdam,OU=Employees,DC=mycompany,DC=com"; break}
  "Tokyo" {$container = "OU=Tokyo,OU=Employees,DC=mycompany,DC=com"; break}
  default {$container = "OU=OtherCities,OU=Employees,DC=mycompany,DC=com"; break}
}
$container

    NOTE: Before using the script, change the DC=mycompany",DC=com string as appropriate to reflect your environment. For example, if you have created the Employees OU in the testlab.ttt domain, use the following string: DC=testlab,DC=ttt.

  10. Click the down arrow on the leftmost button provided below the Rules to generate unique object name list.

  11. In the provided list, click Attribute.

  12. Select Logon Name, and then click OK. Click Next.

  13. Expand Initial Attribute Population Rules, and then create forward sync rules to synchronize the following pairs of attributes:

    Table 115: Initial attribute population rules

    CSV file attribute

    Synchronization direction

    Active Directory attribute

    Logon Name

    =>

    Logon Name (Pre-Windows 2000)

    First Name

    =>

    First Name

    Last Name

    =>

    Last Name

    City

    =>

    City

    For more information on how to create rules, see Modifying attribute values by using rules.

  14. Expand Initial Password, click Text, and type a password in the Set Password dialog. Click OK.

  15. (Optional) To modify the default options to create new user accounts, expand User Account Options.

  16. Click Finish to close the wizard.

Running the configured creating step

To run the creating step

  1. On the Sync Workflows tab, click Run now.

  2. In the Select sync workflow steps to run dialog, select the check box next to the step you created, and then to run the step, click Full Run.

    After the synchronization step run completes, the Synchronization Service Console displays a report that provides information about the objects that participated in the creating step. At this stage, the application does not commit changes to the target Active Directory domain.

TIP: To view a list of user accounts to be created in the Employees OU, click the number next to Objects to be created.

Committing changes to Active Directory

To commit changes to the target Active Directory domain

  • Click Commit.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen