Managing Active Directory Synchronization jobs

Introduced in 2022.2

In Windows domain-based networks, you can use Active Directory Synchronization to import Persons, Organizations, and Locations from the Active Directory into Alloy Navigator Express Customers module. In order to access the Active Directory, the Active Directory Integration functionality uses Lightweight Directory Access Protocol (LDAP).

A special Alloy Navigator Express service - the Active Directory Import tool - synchronizes customer data in Alloy Navigator Express with the Active Directory, and, if needed, creates accounts for new customers. You can configure one or several Active Directory Synchronization jobs to regularly run the Active Directory Import tool in accordance with the schedule you specify.

NOTE: User accounts that are disabled in the Active Directory are ignored when creating new Persons. However, for updating existing Person records, you have the option to choose whether disabled user accounts should be ignored or not. For details, see Creating or modifying Active Directory Synchronization jobs.

Active Directory Synchronization job can automatically create SSP Customer Accounts for Persons you import. These accounts are required for the SSP customers who are requesting support using the Self Service Portal.

IMPORTANT: All imported Active Directory attributes correspond to Person fields in accordance with the configured mapping rules. The default mapping is usually sufficient, but you can modify or delete the default mapping rules, create new rules, and restore the default mapping. For more information, see Configuring Active Directory data mapping.

To open the list of Active Directory Synchronization jobs, choose Services > Active Directory Integration > Synchronization. Here you can perform the following actions:

• To create a synchronization job:

  1. Click New. The Active Directory Synchronization window appears.

  2. Configure the job as described in Creating or modifying Active Directory Synchronization jobs.

• To modify a synchronization job:

  1. Double-click the task on the list. The Active Directory Synchronization window appears.

  2. Modify task properties and click OK. For instructions, see Creating or modifying Active Directory Synchronization jobs.

• To force a job to run immediately:

  • Select the job to run and click Run. The job will run immediately, regardless of its schedule and disabled/enabled status.

• To disable or enable a synchronization job:

  • Right-click a job in the list and choose Disable from the pop-up menu. You can re-enable it by choosing Enable.

• To delete a synchronization job:

  • Select the job and click Delete on the Module menu.

• To refresh the job list:

  • The information displayed in the job list automatically refreshes every ten seconds. If needed, you can refresh it manually by clicking Refresh (or pressing F5 on the keyboard).

After an Active Directory Synchronization job was run by the Automation Server, you can check the results of the job. See Checking Active Directory Synchronization job results.

TIP: If needed, you can untether your Active Directory Synchronization job from the Automation Server and set up its running from the command line. This scenario can be useful for our cloud customers who use an on-premise Active Directory. For details, see Active Directory Import.

Related Information:

Managing SSP Customer accounts