Chat now with support
Chat with Support

Quick Connect Sync Engine 5.5 - Administrator Guide

One Identity Quick Connect Overview Deploying One Identity Quick Connect Sync Engine Getting started Connections to external data systems Synchronizing identity data Mapping objects Automated password synchronization Synchronization history Scenarios of use Appendices

Step 1: Create a workflow

To create a new synchronization workflow

  1. Start the Quick Connect Administration Console.
  2. Open the Workflows tab, and then click Add workflow.
  3. Type a descriptive name for the workflow being created, and then click OK to create the workflow.

Step 2: Create a provisioning step

This section provides instructions on how to:

  • Connect Quick Connect to the source Comma Separated Values (.csv) file and target Active Directory domain.
  • Create a new provisioning step and configure its settings, for example, specify the object attributes to provision.
  • Develop a Windows PowerShell script that returns the name of an Active Directory container for provisioned user accounts.

Preview a list of user accounts to be provisioned.

To create a provisioning step

  1. In the Quick Connect Administration Console, open the Workflows tab, and then click the workflow you created in Step 1: Create a workflow.
  2. Click Add synchronization step.
  3. On the Select an action page, select Provision, and then click Next.
  4. On the Specify source and criteria page, click Specify, click Add new connected system, and then step through the wizard to add the sample Comma Separated Values (.csv) file as a connected system:
    1. Use the Connection name box to type a descriptive name for the connection being created.
    2. In the Use the specified connector list, select Delimited Text File Connector. Click Next.
    3. Click Browse to locate and select the sample Comma Separated Values (.csv) file supplied with the Quick Connect for Base Systems package. This file is located in the folder
      <One Identity Quick Connect Sync Engine installation folder>\Samples.
    4. Step through the wizard until you are on the Specify attributes to identify objects page.
    5. In the Available attributes list, select Employee ID, click Add, and then click Finish.
  5. Click Next.
    1. On the Specify target page, click Specify, and then step through the wizard to add the target Active Directory domain as a connected system:
    2. Use the Connection name box to type a descriptive name for the connection being created.
    3. In the Use the specified connector list, select Active Directory Connector. Click Next.
  6. Use the Domain name box to type the FQDN name of the target Active Directory domain. If necessary, adjust other connection settings on this page as appropriate. Click Finish.
  7. Click the down arrow on the button provided next to the Target container option.
  8. In the provided list, click PowerShell Script.
  9. Insert the following script sample into the dialog box, and then click OK:

    $userCity = $srcObj["City"]
     switch ($userCity)
    {
      "New York" {$container = "OU=New York,OU=Employees,DC=mycompany,DC=com"; break}
      "Amsterdam" {$container = "OU=Amsterdam,OU=Employees,DC=mycompany,DC=com"; break}
      "Tokyo" {$container = "OU=Tokyo,OU=Employees,DC=mycompany,DC=com"; break}
      default {$container = "OU=OtherCities,OU=Employees,DC=mycompany,DC=com"; break}
    }
    $containe
    r

    NOTE: Before using the script, change the "DC=mycompany",DC=com" string as appropriate to reflect your environment. For example, if you have created the Employees OU in the testlab.ttt domain, use the following string: "DC=testlab,DC=ttt".
  1. Click the down arrow on the leftmost button provided below the Rules to generate unique object name list.
  2. In the provided list, click Attribute.
  3. Select Logon Name, and then click OK. Click Next.
  4. Expand Initial Attribute Population Rules, and then create forward sync rules to synchronize the following pairs of attributes:
    Table 18: Initial attribute population rules

    CSV file attribute

    Synchronization direction

    Active Directory attribute

    Logon Name

    =>

    Logon Name (Pre-Windows 2000)

    First Name

    =>

    First Name

    Last Name

    =>

    Last Name

    City

    =>

    City

    For information on how to create rules, see Modifying attribute values by using rules.

  5. Expand Initial Password, click Text, and type a password in the Set Password dialog box. Click OK.
  6. Optionally, you can expand User Account Options to modify the default options to create new user accounts.
  7. Click Finish to close the wizard.

Step 3: Run the created provisioning step

To run the provisioning step

  1. On the Workflows tab, click Run now.
  2. In the Select workflow steps to run dialog box, select the check box next to the step you created, and then click Full Run to run the step.

    After the synchronization step run completes, the Quick Connect Administration Console displays a report that provides information about the objects that participated in the provisioning step. At this stage, the application does not commit changes to the target Active Directory domain.

NOTE: To view a list of user accounts to be created in the Employees OU, click the number next to Objects to be provisioned.

Step 4: Commit changes to Active Directory

  • Click Commit.

    NOTE: You can use the Active Directory Users and Computers tool to ensure that Quick Connect has created user accounts in the Employees OU. The New York, Tokyo, Amsterdam, and OtherCities OUs may include some disabled user accounts created by Quick Connect.
Related Documents