Quick Connect for Active Directory 6.1 - Administration Guide

• Getting started with identity data synchronization
• Managing synchronization workflows
• Managing workflow steps
• Using workflow alerts

To synchronize identity data between connected data systems, you can use synchronization workflows and synchronization steps. A synchronization workflow is a set of data synchronization operations called synchronization steps. A workflow can include one or more steps. Each synchronization step defines a synchronization operation to be run between the source and target connected data systems. To manage workflows and their steps, you can use the Workflows tab in the Quick Connect Administration Console.

You can configure a synchronization step to perform one of the following operations:

• Provision. Creates objects in the target data system based on the changes made to specific objects in the source data system. When creating a new object in the target data system, One Identity Quick Connect Sync Engine generates initial values for the object attributes using the attribute population rules you have configured.
• Update. Modifies object attributes in the target data system based on the changes made to specific objects in the source data system. To specify the objects that will participate in the update operation you can use object mapping rules. For more information, see Mapping objects.
• Deprovision. Modifies or removes objects in the target data system after their counterparts have been disconnected from the source data system. One Identity Quick Connect Sync Engine can be configured to remove target objects permanently or change them to a specific state. To specify the objects that will participate in the deprovision operation you can use object mapping rules. For more information, see Mapping objects.

When configuring a synchronization step you can specify the following:

• Containers to which you want to provision or move objects.
• Settings to generate names for objects being created or modified.
• Settings to synchronize group memberships.
• Settings to synchronize attribute values.

To synchronize identity data between two data systems, you need to create a synchronization workflow, populate the workflow with synchronization steps, and then run the workflow manually or schedule the workflow run. The following figure illustrates how One Identity Quick Connect Sync Engine synchronizes identity data in connected data systems:

Running a workflow causes One Identity Quick Connect Sync Engine to read data in the source and target data systems according to the settings in the workflow steps and prepare a list of changes to be made in the target system. Then, you can commit these changes to the target data system.

Running a workflow manually allows you to review a list of changes before committing them to the target data system. A scheduled workflow run always commits changes to the target data system automatically.

You can configure as many synchronization workflows as needed, each performing its own set of synchronization steps.

In this chapter:

• Managing synchronization workflows
• Managing workflow steps

In this section:

• Creating a synchronization workflow
• Running a synchronization workflow
• Renaming a synchronization workflow
• Deleting a synchronization workflow

To create a synchronization workflow

1. In the Quick Connect Administration Console, open the Workflows tab.
2. Click Add workflow.
3. Use the Synchronization workflow name text box to type a name for the workflow being created.
4. Click OK.

   The new workflow appears on the Workflows tab.

   After you have created a workflow, you need to populate it with one or more synchronization steps. For more information, see Managing workflow steps.