Active Roles 8.1.1 - Synchronization Service Administration Guide

You can specify the following additional group attributes in your Salesforce connection.

Table 46: Additional group attributes
Attribute	Description	Supported operations
vaMemberOf	Allows you to define group membership for the group in Salesforce. NOTE: Consider the following when using this attribute: This attribute is primarily intended for group membership synchronization. This attribute contains references to other groups where this group is a member.	Read, Write
vaMemberOfName	Allows you to define group membership for the group. Specify the names of Salesforce groups where you want the group to be a member.	Read, Write
vaMember	Allows you to define members of the group. This attribute contains references to the users and/or groups that are members of a particular group.	Read, Write
vaMemberName	Allows you to define members of a particular group. Specify the names of users and/or groups you want to be members of the group.	Read, Write

Scenario: Provisioning users from an Active Directory domain to Salesforce

This scenario illustrates how to configure a sync workflow to provision users from an Active Directory domain to Salesforce.

Configuring a connection to the source Active Directory domain

For instructions on how to create a new connection to an Active Directory domain, see Creating an Active Directory connection.

Configuring a connection to Salesforce

For instructions on how to create a new connection to Salesforce, see Creating a Salesforce connection.

Creating a new sync workflow

For instructions on how to create a new sync workflow for the configured Salesforce connection, see Scenario: Provisioning users from an Active Directory domain to Salesforce.

Configuring a workflow step

Once the required connections and the sync workflow are set, configure a new workflow step.

To configure a workflow step

In the Synchronization Service Console, navigate to the Workflows tab and open the sync workflow you created by clicking its name. Then, click Add synchronization step.
On the Select an action page, click Provision, then click Next.
On the Specify source and criteria page, do the following:
1. Click Specify in the Source connected system option, then click Select existing connected system, and select the Active Directory connection you configured in the Configuring a connection to source Active Directory domain step.
2. Click Finish.
3. In Source object type, click Select, then select the User object type from the list. Click OK.
4. Click Next.
On the Specify target page, do the following:
1. Click Specify in the Target connected system option, then click Select existing connected system, and select the Salesforce connection you configured in the Configuring a connection to Salesforce step.
2. Click Finish.
3. Click Select in the Target object type option, then select the User object type from the list. Click OK.
4. Click Next.
On the Specify provisioning rules page, in the Initial Attribute Population Rules option, add rules to populate the following required attributes:
- Username: Use this attribute to specify a Salesforce user name for the user being provisioned. Make sure the user name you specify meets the format <UserName>@<Domain>, for example jdoe@domain.com.
- vaProfileName: Use this attribute to assign a Salesforce profile to the user being provisioned. A profile defines specific permissions a user has in Salesforce. For more information on profiles, see the Salesforce documentation. Alternatively, you can specify a Salesforce profile by using the ProfileId attribute.
- Email: Use this attribute to specify an existing valid email address for the user being provisioned.
- LastName: Use this attribute to specify the last name of the user being provisioned.
- Alias: Use this attribute to specify a unique Salesforce alias for the user being provisioned. A Salesforce alias can include up to 8 characters. For more information on the Alias attribute, see the Salesforce documentation.

Running your workflow

For instructions on how to run a sync workflow, see Running a sync workflow.

Working with ServiceNow

This section describes how to create or modify a connection to ServiceNow so that Synchronization Service could work with data in that data system.

To create a connection to ServiceNow, use the ServiceNow Connector of Active Roles Synchronization Service.

The ServiceNow Connector supports the following features:

Table 47: ServiceNow Connector – Supported features
Feature	Supported
Bidirectional synchronization Specifies whether you can both read and write data in the connected data system.	Yes
Delta processing mode Specifies whether the connection can process only the data that has changed in the connected data system since the last synchronization operation. This reduces the overall synchronization duration.	No
Password synchronization Specifies whether you can synchronize user passwords from an Active Directory (AD) domain to the connected data system.	Yes
Secure Sockets Layer (SSL) data encryption Specifies whether the connector can use SSL to encrypt data transmitted between Active Roles Synchronization Service and the connected data system.	Yes

Creating a ServiceNow connection

To create a new ServiceNow connection, you must:

Configure ServiceNow to accept synchronization requests from Active Roles Synchronization Service.
Create a new ServiceNow connection in the Synchronization Service with the ServiceNow Connector.
Synchronize the configured ServiceNow Connector schema with the connected ServiceNow instance.

Configuring ServiceNow

To configure ServiceNow

Open the website of your ServiceNow instance.
In the left pane of the ServiceNow website, under System Properties, click Web Services.
Make sure ServiceNow requires basic authorization for incoming RSS and SOAP requests.
In the right pane, make sure you clear the check box below This property sets the elementFormDefault attribute.
Click Save.

Creating a new connection to ServiceNow

To create a new connection

In the Synchronization Service Console, open the Connections tab.
Click Add connection, then use the following options:
- Connection name: Type a descriptive name for the connection.
- Use the specified connector: Select ServiceNow Connector.
Click Next.
On the Specify connection settings page, use the following options:
- ServiceNow instance name: Type the name of the ServiceNow instance to which you want to connect.
- Access ServiceNow instance using. Type the user name and password of the account with which you want to access the specified ServiceNow instance.
- Use a proxy server for your LAN: Select this check box if your LAN uses a proxy server. Then enter the proxy server address in the Proxy server box.
- Use credentials for proxy: Select this check box if your proxy server requires authentication. Use the appropriate text boxes to specify the user name and password with which you want to authenticate.
- Test Connection: Click this button to verify the specified connection settings.
To complete the configuration of the ServiceNow connection, click Finish.
Synchronize the ServiceNow Connector schema with that of the connected ServiceNow instance.

This step is required to pass information about object classes and attributes existing in the connected ServiceNow instance to the ServiceNow Connector, so that the connector could correctly read and write data in the connected ServiceNow instance.

To synchronize the connector schema, do the following:
1. Below the ServiceNow connection you have just created, click the Connection settings link.
2. On the Connection Settings tab, click the Update connector schema item to expand it.
3. Click Update Schema.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem