Introduction
Directory Sync supports users, groups and contact synchronization between environments. The following describes the supported environments and deployment models.
- Local to Local – Covered in this guide. Support synchronization between two local Active Directory environments.
- Cloud to Cloud – Support synchronization between two Microsoft 365 tenant environments.
- Local to Cloud – Support synchronization between an Active Directory and a Microsoft 365 tenant environment when source is Active Directory and target is Microsoft 365 tenant.
- Cloud to Local – Support synchronization between a Microsoft 365 tenant and an Active Directory environment when source is Microsoft 365 tenant and target is Active Directory.
This guide describes how-to setup Users, Groups and Contacts Synchronization for between your On-Premises Active Directory environments.
To set up Directory Sync for Users, Groups and Contacts Synchronization, source objects must be either matched to existing objects or created as new objects in the target environment. To accomplish this, four configurations must be completed prior to the first synchronization.
- Set up Environments
- Set up Local Agents
- Set up Templates
- Set up Workflows
The next section will provide the list of requirements needed to successfully Synchronization Users, Groups and Contacts between two Active Directory environments.
Requirements
In order to facilitate synchronization of Users, Groups and Contacts, the following is a list of minimum requirements to get set up using Directory Sync with your On-Premises Active Directory.
- One Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows.
Setup
This section provides a step-by-step guide on how to set up Users, Groups and Contacts Synchronization for Microsoft Active Directory Environments.
Setup Environments
To begin at least two Active Directory environments must be configured in Directory Sync. At the end of this section there will be two Active Directory environments fully configured.
An environment is an end-point connection that can control the scope of objects read. This guide will walk through how to create the source and target active directory environments.
To create a local AD environment, the following are required
- One Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows.
- One Windows Server to install and host the Directory Sync Agent.
Follow these steps to setup the cloud environment endpoints.
- Navigate to Environments.
- Click New.
- Click Local as the environment type. Click Next.
- Name the environment. Click Next.
- Name the local agent. Click Next.
- Note the agent registration URL and registration Key for later use. Click Finish.
- Install the agent in the Windows Server that is joined to the local AD domain.
- Launch the Directory Sync Agent installation in the target workstation or server.
- Accept the license agreement and click Next.
- Enter the target active directory environment information by providing the following and click next.
- Domain Name
- Global Catalog Server
- Username
- Password
- Enter the Directory Sync Registration URL and Agent Registration Key information and click Next.
- In the sIDHistory Migration section, you may skip this step if sIDHistory Migration is not part of your project scope.
|
|
NOTE: See the On Demand Migration Active Directory User Guide for detailed information about agent installation and set-up requirements. |
- Once the agent is installed and the environment is discovered. Click Settings to access the local AD environment setting page.
- Click the Organization Unit tab and define the OU filter based on your project scope.
- Click the Filters tab and define any LDAP filter based on your project scope.
- Click Save.
- Repeat steps 2 – 11 for the next local environment
