This section provides some use case scenarios that help you familiarize yourself with Synchronization Service. The scenarios illustrate how to create and run sync workflows and their steps to update and create user information from a Human Resources database represented by a delimited text file to an Active Directory domain.
The scenarios are:
Scenario 1: Create users from a .csv file to an Active Directory domain. In this scenario, Synchronization Service creates user accounts from a Comma Separated Values (.csv) file that includes a Human Resources (HR) database to individual Organizational Units in an Active Directory domain, depending on the city where each user is based.
Scenario 2: Use a .csv file to update user accounts in an Active Directory domain. In this scenario, Synchronization Service updates user accounts in an Active Directory domain based on the changes made to the Human Resources (HR) database saved in a Comma Separated Values (.csv) file.
Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain. In this scenario, Quick Connect updates data in One Identity Manager based on the changes made in Active Directory domain.
Scenario 4: Deprovisioning between One Identity Manager Custom Target Systems and an Active Directory domain. In this scenario, Quick connect deprovisioning synchronized objects in One Identity Manager processed from the Active Directory domain.
Scenario 5: Provisioning of Groups between One Identity Manager Custom Target Systems and an Active Directory domain. In this scenario, Quick Connect provisions group objects to be synchronized to One Identity Manager from Active Directory domain.
Scenario 6: Enabling Delta Sync mode between One Identity Manager Custom Target Systems and an Active Directory domain. In this scenario, Quick Connect updates data in One Identity Manager based on the changes made in Active Directory domain in the delta sync mode.
Before you proceed with these sample scenarios, perform the following steps:
Make sure you have properly configured the connection to the target Active Directory domain in the Synchronization Service Administration Console.
Create the Employees Organizational Unit (OU) at the root of the target Active Directory domain.
In the Employees OU, create the following OUs:
New York
Tokyo
Amsterdam
OtherCities
The following scenario demonstrates how to create user accounts from a Human Resources (HR) database to an Active Directory domain. The HR database is represented by a sample Comma Separated Values (.csv) file. Depending on the user city, accounts will be created in one of the following OUs:
This scenario includes the following steps:
To create a new sync workflow
This section provides instructions on how to:
To add a creating step
$userCity = $srcObj["City"]
switch ($userCity)
{
"New York" {$container = "OU=New York,OU=Employees,DC=mycompany,DC=com"; break}
"Amsterdam" {$container = "OU=Amsterdam,OU=Employees,DC=mycompany,DC=com"; break}
"Tokyo" {$container = "OU=Tokyo,OU=Employees,DC=mycompany,DC=com"; break}
default {$container = "OU=OtherCities,OU=Employees,DC=mycompany,DC=com"; break}
}
$container
|
NOTE: Before using the script, change the "DC=mycompany",DC=com" string as appropriate to reflect your environment. For example, if you have created the Employees OU in the testlab.ttt domain, use the following string: "DC=testlab,DC=ttt" |
CSV file attribute |
Synchronization direction |
Active Directory attribute |
Logon Name |
=> |
Logon Name (Pre-Windows 2000) |
First Name |
=> |
First Name |
Last Name |
=> |
Last Name |
City |
=> |
City |
For information on how to create rules, see Modifying attribute values by using rules.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책