On Demand Migration Current - Active Directory Password Sync Setup Quick Start Guide

This section provides a step-by-step guide on how to set up password synchronization for Microsoft Active Directory Environments.

To begin at least two Active Directory environments must be configured in Directory Sync. At the end of this section there will be two Active Directory environments fully configured.

An environment is an end-point connection that can control the scope of objects read. This guide will walk through how to create the source and target active directory environments.

To create a local AD environment, the following are required

• One Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows. This Administrator Account should also meet the Password Synchronization requirement as stated in Account Permissions section above.
• One Windows Server to install and host the Directory Sync Agent.

Follow these steps to setup the cloud environment endpoints.  

1. Navigate to Environments.
2. Click the New button.
3. Click Local as the environment type. Click Next.
4. Name the environment. Click Next.
5. Name the local agent. Click Next.
6. Note the agent registration URL and registration Key for later use. Click Finish.
7. Install the agent in the Windows Server that is joined to the local AD domain.  
   1. Launch the Directory Sync Agent installation in the target workstation or server
   2. Accept the license agreement and click Next.
   3. Enter the target active directory environment information by providing the following:
      • Domain Name
      • Global Catalog Server
      • Username
      • Password
      • Enter the Directory Sync Registration URL and Agent Registration Key information
   4. Click Next.
   5. In the SID History Migration section, you may skip this step if SID History Migration is not part of your project scope.
   6. Click Next.

   NOTE: Refer to the On Demand Migration Active Directory User Guide for detailed information about agent installation and set-up requirements.

8. Once the agent is installed and the environment is discovered, click Setting to access the local AD environment setting page.
9. Click on the Organization Unit tab and define the OU filter based on your project scope.
10. Click on the Filters tab and define any LDAP filter based on your project scope.
11. Click Save.
12. Repeat steps 2 – 11 for the next local environment

Once both local environments are configured, the next step will be to prepare the environment for Real Time Password Synchronization.  Password Monitoring must be configured in your source environment. 

1. Navigate to Environments.
2. Select the source environment where you would like Directory Sync to monitor password changes and click SETTINGS
3. Click the Passwords tab.
4. Select an agent to use for monitoring password changes from the Agent Drop down list.
5. Click Save, then click Back.

Enable target environment for Password Changes    

Allow Password Changes must be enabled in your target environment for Directory Sync to synchronize Passwords when they are changed in the source environment.

1. Navigate to Environments.
2. Select the target environment where you would like Directory Sync to write password changes and click SETTINGS.
3. Click on the Passwords tab.
4. Select Allow Password Changes from Other Environments.
5. Click Save, then click Back.