On a very high level, you need to complete the following steps to synchronize identity data between two external data systems:
For more information, see Connections to external data systems.
For more information, see Modifying synchronization scope for a connection.
For more information, see Creating a sync workflow.
For more information, see Managing sync workflow steps.
For more information, see Running a sync workflow.
You can also use the Synchronization Service to automatically synchronize passwords from a specified Active Directory domain to other connected data systems. For more information, see Automated password synchronization.
Management Shell is implemented as a Windows PowerShell module, providing an extension to the Windows PowerShell environment. The commands provided by Management Shell conform to the Windows PowerShell standards, and are fully compatible with the default command-line tools that come with Windows PowerShell.
You can open Management Shell by using either of the following procedures. Each procedure loads the Management Shell module into Windows PowerShell. If you do not load the Management Shell module before you run a command (cmdlet) provided by that module, you will receive an error.
To open Management Shell
Import-Module [-Name]
In the Name parameter specify the name of a file in the module and the file path. By default, the following path to the SyncServiceManagementShell module is used: C:\Program Files\One Identity\Active Roles\7.2\SyncService\SyncServiceShell\SyncServiceManagementShell.psd1.
Alternatively, complete the steps related to your version of Windows:
Windows 7 Windows Server 2008 R2 |
Windows 8 or 8.1 Windows Server 2012 or 2012 R2 |
|
|
Upon the shell start, the console may display a message stating that a certain file published by One Identity is not trusted on your system. This security message indicates that the certificate the file is digitally signed with is not trusted on your computer, so the console requires you to enable trust for the certificate issuer before the file can be run. Press either R (Run once) or A (Always run). To prevent this message from appearing in the future, it is advisable to choose the second option (A).
All cmdlets are presented in verb-noun pairs. The verb-noun pair is separated by a hyphen (-) without spaces, and the cmdlet nouns are always singular. The verb refers to the action that the cmdlet performs. The noun identifies the entity on which the action is performed. For example, in the Get-QCObject cmdlet name, the verb is Get and the noun is QCObject. All the Management Shell cmdlets have the nouns prefixed with QC, to distinguish the Management Shell cmdlets from those provided by PowerShell itself or by other PowerShell modules.
This section provides instructions on how to get help information for the cmdlets added by Management Shell to the Windows PowerShell environment.
To view this |
Run this command | ||
A list of all the Synchronization Service Management Shell cmdlets available to the shell. |
Get-QCCommand | ||
Information about the parameters and other components of a Synchronization Service Management Shell cmdlet. |
Run one of the following:
| ||
Basic help information for a Synchronization Service Management Shell cmdlet. |
Get-Help <CmdletName> | ||
Detailed help information for a Synchronization Service Management Shell cmdlet, including the descriptions of available parameters and usage examples. |
Get-Help <CmdletName> -full | ||
Basic information about how to use the help system in Windows PowerShell, including Help for the Synchronization Service Management Shell. |
Get-Help |
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy