Setting up the SharePoint Online synchronization server
All One Identity Manager Service actions are executed against the target system environment on the synchronization server. Data entries required for synchronization and administration with the One Identity Manager database are processed by the synchronization server.
The One Identity Manager Service with the SharePoint Online connector must be installed on the synchronization server.
Detailed information about this topic
System requirements for the synchronization server
To set up synchronization with a SharePoint Online environment, a server must be available on which the following software is installed:
- Windows operating system version 8.1. or later
-
Windows Server
Following versions are supported:
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2016
-
Microsoft .NET Framework Version 4.7.2 or later
NOTE: Take the target system manufacturer's recommendations into account.
Installing the One Identity Manager Service
The One Identity Manager Service with the SharePoint Online connector must be installed on the synchronization server. The synchronization server must be known as a Job server in the One Identity Manager.
| Property | Value |
|---|---|
| Server function | SharePoint Online connector |
| Machine role | Server | Job server | SharePoint Online |
|
|
NOTE: If several target system environments of the same type are synchronized under the same synchronization server, it is useful to set up a Job server for each target system on performance grounds. This avoids unnecessary swapping of connections to target systems because a Job server only has to process tasks of the same type (re-use of existing connections). |
Use the Server Installer to install the One Identity Manager Service. The program executes the following steps:
-
Setting up a Job server.
-
Specifying machine roles and server function for the Job server.
-
Remote installation of One Identity Manager Service components corresponding to the machine roles.
-
Configuration of One Identity Manager Service.
-
Starts the One Identity Manager Service.
|
|
NOTE: The program executes remote installation of the One Identity Manager Service. Local installation of the service is not possible with this program. Remote installation is only supported within a domain or a trusted domain. |
For remote installation of One Identity Manager Service, you require an administrative workstation on which the One Identity Manager components are installed.
To install and configure One Identity Manager Service remotely on a server
-
Start the program Server Installer on your administrative workstation.
-
Enter the valid connection credentials for the One Identity Manager database on the Database connection page.
-
Specify the server on which you want to install One Identity Manager Service on the Server properties page.
-
Select a Job server from the Server menu.
- OR -
To create a new Job server, click Add.
-
Enter the following data for the Job server.
Table 4: Job Server Properties Property
Description
Server
Job server name.
Queue
Name of the queue to handle the process steps. Each One Identity Manager Service within the network must have a unique queue identifier. The process steps are requested by the job queue using exactly this queue name. The queue identifier is entered in the One Identity Manager Service configuration file.
Full server name
Full server name in accordance with DNS syntax.
Example:
<Name of servers>.<Fully qualified domain name>
NOTE: You can use the Extended option to make changes to other properties for the Job server. You can also edit the properties later with Designer.
-
-
Select SharePoint Online on the Machine roles page.
-
Select SharePoint Online connector on the Server functions page.
- Check the One Identity Manager Service configuration on the Service settings page.
NOTE: The initial service configuration is predefined already. If further changes need to be made to the configuration, you can do this later with the Designer. For detailed information about configuring the service, see the One Identity Manager Configuration Guide. -
To configure remote installations, click Next.
-
Confirm the security prompt with Yes.
-
Select the directory with the install files on Select installation source.
-
Select the file with the private key on the page Select private key file.
NOTE: This page is only displayed when the database is encrypted. -
Enter the service's installation data on the Service access page.
Table 5: Installation Data Data
Description
Computer
Server on which to install and start the service from.
To select a server
-
Enter a name for the server.
- OR -
-
Select a entry from the list.
Service account
User account data for the One Identity Manager Service.
To enter a user account for the One Identity Manager Service
-
Enter user account, password and password confirmation.
Installation account
Data for the administrative user account to install the service.
To enter an administrative user account for installation
-
Enable Advanced.
-
Enable Current user.
This uses the user account of the current user.
- OR -
-
Enter user account, password and password confirmation.
-
-
Click Next to start installing the service.
Installation of the service occurs automatically and may take some time.
-
Click Finish on the last page of Server Installer.
NOTE: The service is entered with the name One Identity Manager Service in the server service management.
Preparing a remote connection server for access to the SharePoint Online tenant
To configure synchronization with a target system, One Identity Manager must load the data from the target system. One Identity Manager communicates directly with target system to do this. Sometimes direct access from the workstation on which the Synchronization Editor is installed is not possible, because of the firewall configuration, for example, or because the workstation does not fulfill the necessary hardware and software requirements.
The remote connection server and the workstation must be in the same Active Directory domain.
Remote connection server configuration:
-
One Identity Manager Service is started
-
RemoteConnectPlugin is installed
-
SharePoint Online connector is installed
The remote connection server must be declared as a Job server in One Identity Manager. The Job server name is required.
|
|
TIP: The remote connection server requires the same configuration as the synchronization server (with regard to the installed software and entitlements). Use the synchronization as remote connection server at the same time, by simply installing the RemoteConnectPlugin as well. |
For more detailed information about setting up a remote connection, see the One Identity Manager Target System Synchronization Reference Guide.