Return
-
Title
ODM AD dirsync is not creating users in the target domain -
Description
ODM AD dirsync is not creating users in the target domain even though everything is configured correctly. Workflow Staging is empty with no actions. -
Cause
Scope in the workflow is not correlating to the scope in the environment. -
Resolution
To resolve the issue, please perform the workflow "scope check", following these steps:- click on hamburger menu, Environments
- select the source environment and click on Settings
- click on Organizational Units and write down what OUs are selected there
- click on Filters and verify if there's a LDAP filter specified
- also write down what types of objects are excluded (expired, disabled, etc)
This will outline a scope, that ODM will use when source environment is being read.
Perform the same check for the target environment.
Once it's done, open a workflow with Staging step in it.- click on Sync Workflow, Stage, Select.
- go through the wizard and write down the source OUs that are specified in there. This is a crucial step to verify whether specified OUs are listed in OUs of the environment or below them (if sub-OUs checkbox is checked)
- double-click each OU and verify if there's no additional LDAP filter specified. Such LDAP filter will narrow the scope down and even when source AD objects are located in the proper source OU, LDAP filter may force ODM AD to ignore it