Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Quick Connect Sync Engine 5.5 - Administrator Guide

Table of Contents

One Identity Quick Connect Overview

About One Identity Quick Connect Features and benefits

Bidirectional synchronization Delta processing mode Synchronization of group membership Windows PowerShell scripting Attribute synchronization rules Rule-based generation of distinguished names Scheduling capabilities Extensibility

Technical overview

One Identity Quick Connect Sync Engine Capture Agent Connectors and connected data systems Synchronization workflows and steps

Deploying One Identity Quick Connect Sync Engine

Licensing Installation steps

Step 1: Install One Identity Sync Engine Step 2: Configure One Identity Sync Engine

Upgrading from an earlier version

In-place upgrade

Step 1: Install One Identity Quick Connect Sync Engine Step 2: Create new SQL Server databases Step 3: Import configuration settings Step 4: Upgrade Capture Agent on each DC

Silent installation

Silent installation of One Identity Quick Connect Sync Engine Silent installation of Capture Agent

Communication ports

Getting started

Quick Connect Administration Console

Workflows tab Sync History tab Connections tab Mapping tab Password Sync tab Configuring diagnostic logging

Steps to synchronize identity data

Connections to external data systems

External data systems supported out of the box

Working with ActiveRoles Server

Creating an ActiveRoles Server connection Modifying an ActiveRoles Server connection

Working with Quest One Identity Manager

Creating a Quest One Identity Manager connection

Step 1: Provide access to Identity Manager DLLs Step 2: Configure a connection to Quest One Identity Manager

Modifying a Quest One Identity Manager connection Quest One Identity Manager Connector configuration file

Working with One Identity Manager

Creating a One Identity Manager connection Modifying a One Identity Manager connection One Identity Manager Connector configuration file

Using remote connectors

Steps to deploy a remote connector

Step 1: Install Connector Access Service Step 2: Install connector

Creating a connection using a remote connector

Creating a connection Renaming a connection Deleting a connection Modifying synchronization scope for a connection Using connection handlers Specifying password synchronization settings for a connection

Synchronizing identity data

Getting started with identity data synchronization Managing synchronization workflows

Creating a synchronization workflow Running a synchronization workflow

Running a workflow manually Running a workflow on a recurring schedule Disabling a workflow run schedule

Renaming a synchronization workflow Deleting a synchronization workflow

Managing workflow steps

Creating a provisioning step Creating an updating step Creating a deprovisioning step Modifying a step

General Options tab Source tab Target tab Provisioning Rules tab Deprovisioning Rules tab Updating Rules Tab Step Handlers tab

Deleting a step Changing the order of steps in a workflow Generating object names by using rules Modifying attribute values by using rules

Configuring a forward sync rule

Source item Target item

Configuring a reverse sync rule

Source item Target item

Configuring a merge sync rule

Using value generation rules

Configuring a rule entry

Using workflow step handlers Example: Synchronizing group memberships Example: Synchronizing multivalued attributes

Using workflow alerts

Creating or editing a workflow alert Deleting a workflow alert Managing outgoing mail profiles

Outgoing mail profile settings

Mapping objects

About mapping objects Steps to map objects

Step 1: Create mapping pairs Step 2: Create mapping rules Step 3 (optional): Change scope for mapping rules Step 4: Run map operation

Steps to unmap objects

Automated password synchronization

About automated password synchronization Steps to automate password synchronization Managing Capture Agent

Installing Capture Agent manually Using Group Policy to install Capture Agent Uninstalling Capture Agent

Managing password sync rules

Creating a password sync rule Deleting a password sync rule Modifying settings of a password sync rule

Fine-tuning automated password synchronization

Configuring Capture Agent

Step 1: Create and link a Group Policy object Step 2: Add administrative template to Group Policy object Step 3: Use Group Policy object to modify Capture Agent settings

Configuring Quick Connect Service Specifying a custom certificate for encrypting password sync traffic

Step 1: Obtain and install a certificate Step 2: Export custom certificate to a file Step 3: Import certificate into certificates store Step 4: Copy certificate’s thumbprint Step 5: Provide certificate’s thumbprint to Capture Agent Step 6: Provide certificate’s thumbprint to Quick Connect Service

Using PowerShell scripts with password synchronization

Example of a PowerShell script run after password synchronization

Synchronization history

About synchronization history Viewing workflow history Viewing mapping history Searching synchronization history Cleaning up synchronization history

Scenarios of use

About scenarios Scenario 1: Provision users from a .csv file to an Active Directory domain

Step 1: Create a workflow Step 2: Create a provisioning step Step 3: Run the created provisioning step Step 4: Commit changes to Active Directory

Scenario 2: Use a .csv file to update user accounts in an Active Directory domain

Step 1: Create an updating step Step 2: Run the created updating step Step 3: Commit changes to Active Directory

Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain

Step 1: Create connection to One Identity Manager Step 2: Configure One Identity Manager modules, Custom Target System and Container Information Step 3: Create Workflow for Provisioning Step 4: Create Provisioning Step 5: Specify the synchronization rules Step 6: Execute Workflow Step 7: Commit changes to One Identity Manager Step 8: Verify on One Identity Manager

Scenario 4: Deprovisioning between One Identity Manager Custom Target Systems and an Active Directory domain Scenario 5: Provisioning of Groups between One Identity Manager Custom Target Systems and an Active Directory domain Scenario 6: Enabling Delta Sync mode between One Identity Manager Custom Target Systems and an Active Directory domain

Appendix A: Developing PowerShell scripts for attribute synchronization rules

Accessing source and target objects using built-in hash tables Example script

Appendix B: Using a PowerShell script to transform passwords

Accessing source object password Example script

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center