Chat now with support
Chat with Support

Identity Manager 8.1 - Administration Guide for Connecting to SharePoint Online

Mapping a SharePoint Online environment in One Identity Manager Synchronizing a SharePoint Online environment Managing SharePoint Online user accounts and employees Managing the assignments of SharePoint Online groups and roles Mapping of SharePoint Online objects in One Identity Manager
SharePoint Online tenants SharePoint Online user accounts SharePoint Online groups SharePoint Online permission levels SharePoint Online site collections SharePoint Online sites SharePoint Online roles
Handling of SharePoint Online objects in Web Portal Basic data for managing a SharePoint Online environment Appendix: Configuration parameters for managing SharePoint Online Appendix: Default project template for SharePoint Online Appendix: Editing system objects About us

Setting up the SharePoint Online synchronization server

All One Identity Manager Service actions are executed against the target system environment on the synchronization server. Data entries required for synchronization and administration with the One Identity Manager database are processed by the synchronization server.

The One Identity Manager Service with the SharePoint Online connector must be installed on the synchronization server.

Detailed information about this topic

System requirements for the synchronization server

To set up synchronization with a SharePoint Online environment, a server must be available on which the following software is installed:

  • Windows operating system version 8.1. or later
  • Windows Server

    Following versions are supported:

    • Windows Server 2012
    • Windows Server 2012 R2
    • Windows Server 2016
  • Microsoft .NET Framework Version 4.7.2 or later

    NOTE: Take the target system manufacturer's recommendations into account.

Installing the One Identity Manager Service

The One Identity Manager Service with the SharePoint Online connector must be installed on the synchronization server. The synchronization server must be known as a Job server in the One Identity Manager.

Table 3: Properties of the Job server
Property Value
Server function SharePoint Online connector
Machine role Server | Job server | SharePoint Online

NOTE: If several target system environments of the same type are synchronized under the same synchronization server, it is useful to set up a Job server for each target system on performance grounds. This avoids unnecessary swapping of connections to target systems because a Job server only has to process tasks of the same type (re-use of existing connections).

Use the Server Installer to install the One Identity Manager Service. The program executes the following steps:

  • Setting up a Job server.

  • Specifying machine roles and server function for the Job server.

  • Remote installation of One Identity Manager Service components corresponding to the machine roles.

  • Configuration of One Identity Manager Service.

  • Starts the One Identity Manager Service.

NOTE: The program executes remote installation of the One Identity Manager Service. Local installation of the service is not possible with this program. Remote installation is only supported within a domain or a trusted domain.

For remote installation of One Identity Manager Service, you require an administrative workstation on which the One Identity Manager components are installed. For detailed information about installing a workstation, see the One Identity Manager Installation Guide.

To install and configure One Identity Manager Service remotely on a server

  1. Start the program Server Installer on your administrative workstation.

  2. Enter the valid connection credentials for the One Identity Manager database on the Database connection page.

  3. Specify the server on which you want to install One Identity Manager Service on the Server properties page.

    1. Select a Job server from the Server menu.

      - OR -

      To create a new Job server, click Add.

    2. Enter the following data for the Job server.

      Table 4: Job Server Properties




      Job server name.


      Name of the queue to handle the process steps. Each One Identity Manager Service within the network must have a unique queue identifier. The process steps are requested by the job queue using exactly this queue name. The queue identifier is entered in the One Identity Manager Service configuration file.

      Full server name

      Full server name in accordance with DNS syntax.


      <Name of servers>.<Fully qualified domain name>

      NOTE: You can use the Extended option to make changes to other properties for the Job server. You can also edit the properties later with Designer.
  4. Select SharePoint Online on the Machine roles page.

  5. Select SharePoint Online connector on the Server functions page.

  6. Check the One Identity Manager Service configuration on the Service settings page.

    NOTE: The initial service configuration is predefined already. If further changes need to be made to the configuration, you can do this later with the Designer. For detailed information about configuring the service, see the One Identity Manager Configuration Guide.
  7. To configure remote installations, click Next.

  8. Confirm the security prompt with Yes.

  9. Select the directory with the install files on Select installation source.

  10. Select the file with the private key on the page Select private key file.

    NOTE: This page is only displayed when the database is encrypted.
  11. Enter the service's installation data on the Service access page.

    Table 5: Installation Data




    Server on which to install and start the service from.

    To select a server

    • Enter a name for the server.

      - OR -

    • Select a entry from the list.

    Service account

    User account data for the One Identity Manager Service.

    To enter a user account for the One Identity Manager Service

    • Enter user account, password and password confirmation.

    Installation account

    Data for the administrative user account to install the service.

    To enter an administrative user account for installation

    • Enable Advanced.

    • Enable Current user.

      This uses the user account of the current user.

      - OR -

    • Enter user account, password and password confirmation.

  12. Click Next to start installing the service.

    Installation of the service occurs automatically and may take some time.

  13. Click Finish on the last page of Server Installer.

    NOTE: The service is entered with the name One Identity Manager Service in the server service management.

Preparing a remote connection server for access to the SharePoint Online tenant

To configure synchronization with a target system, One Identity Manager must load the data from the target system. One Identity Manager communicates directly with target system to do this. Sometimes direct access from the workstation on which the Synchronization Editor is installed is not possible, because of the firewall configuration, for example, or because the workstation does not fulfill the necessary hardware and software requirements. If direct access to the workstation is not possible, you can set up a remote connection.

The remote connection server and the workstation must be in the same Active Directory domain.

Remote connection server configuration:

  • One Identity Manager Service is started

  • RemoteConnectPlugin is installed

  • SharePoint Online connector is installed

The remote connection server must be declared as a Job server in One Identity Manager. The Job server name is required.

TIP: The remote connection server requires the same configuration as the synchronization server (with regard to the installed software and entitlements). Use the synchronization as remote connection server at the same time, by simply installing the RemoteConnectPlugin as well.

For more detailed information about setting up a remote connection, see the One Identity Manager Target System Synchronization Reference Guide.

Related Topics
Related Documents