Chat now with support
Chat with Support

On Demand Migration Current - Active Directory Modern Password Sync Setup Quick Start Guide

Setup

This section provides a step-by-step guide on how to set up Password Synchronization for Microsoft Active Directory Environments.

Setup Environments

To begin at least two (2) Active Directory environments must be configured in Directory Sync. At the end of this section, there will be two (2) Active Directory environments fully configured. Note, it's essential to install the Directory Sync Agent with version 20.12.13 or higher.

An environment is an end-point connection that can control the scope of objects read. This guide will walk through how to create the source and target active directory environments.

To create a local AD environment, the following are required

  • One (1) Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows. This Administrator Account should also meet the Password Synchronization requirement as stated in the Account Permissions section above.

  • One (1) Windows Server to install and host the Directory Sync Agent.

Follow these steps to setup the local environment endpoints.  

  1. Navigate to Environments.

  1. Click the New button.

  2. Click Local as the environment type, click Next.

  3. Name the environment, click Next.

  4. Name the local agent, click Next.

  5. Note the agent registration URL and registration Key for later use, click Finish.

  6. Install the agent in the Windows Server that is joined to the local AD domain.  

    1. Launch the Directory Sync Agent installation in the target workstation or server.

    2. Accept the license agreement and click on next.

    3. Specify the Passphrase to be used to communicate with Password Filter installed on the Domain Controller. (You may select Use Legacy Password Sync if you do not plan to use the Modern Password Sync)

      A screenshot of a computer screen Description automatically generated

    4. Enter the target active directory environment information by providing the following and click Next.

      1. Domain Name

      2. Global Catalog Server

      3. Username

      4. Password

    5. Enter the Directory Sync Registration URL and Agent Registration Key information and click Next.

    6. In the sIDHistory Migration section, you may skip this step if sIDHistory Migration is not part of your project scope.

Note, Refer to On Demand Migration Active Directory User Guide for detailed information about agent installation and set-up requirements.

  1. Once the agent is installed and the environment is discovered, click on the Setting button to access the local AD environment setting page.

  2. Click on the Organization Unit tab and define the OU filter based on your project scope.

  3. Click on the Filters tab and define any LDAP filter based on your project scope.

  4. Click Save.

  5. Repeat steps 2 – 11 for the next local environment.

 

 

Prepare source environment for Password Monitoring

Once both local environments are configured, the next step will be to prepare the environment for Real Time Password Synchronization. Password Monitoring must be configured in your source environment. 

  1. Navigate to Environments.

  1. Select the source environment where you would like Directory Sync to monitor password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Select an agent to use for monitoring password changes from the Agent Drop down list.

  4. Download the Password Filter Plugin and save it in a secure place for later use. 

  5. Click on the Domain Controllers tab.

  6. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

 

Enable target environment for Password Changes    

Allow Password Changes must be enabled in your target environment for Directory Sync to synchronize Passwords when they are changed in the source environment.  

  1. Navigate to Environments.

  1. Select the target environment where you would like Directory Sync to write password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Check the checkbox for Allow Password Changes from Other Environments.

  4. Click on the Domain Controllers tab.

  5. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

Prepare source environment for Password Monitoring

Setup Environments

To begin at least two (2) Active Directory environments must be configured in Directory Sync. At the end of this section, there will be two (2) Active Directory environments fully configured. Note, it's essential to install the Directory Sync Agent with version 20.12.13 or higher.

An environment is an end-point connection that can control the scope of objects read. This guide will walk through how to create the source and target active directory environments.

To create a local AD environment, the following are required

  • One (1) Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows. This Administrator Account should also meet the Password Synchronization requirement as stated in the Account Permissions section above.

  • One (1) Windows Server to install and host the Directory Sync Agent.

Follow these steps to setup the local environment endpoints.  

  1. Navigate to Environments.

  1. Click the New button.

  2. Click Local as the environment type, click Next.

  3. Name the environment, click Next.

  4. Name the local agent, click Next.

  5. Note the agent registration URL and registration Key for later use, click Finish.

  6. Install the agent in the Windows Server that is joined to the local AD domain.  

    1. Launch the Directory Sync Agent installation in the target workstation or server.

    2. Accept the license agreement and click on next.

    3. Specify the Passphrase to be used to communicate with Password Filter installed on the Domain Controller. (You may select Use Legacy Password Sync if you do not plan to use the Modern Password Sync)

      A screenshot of a computer screen Description automatically generated

    4. Enter the target active directory environment information by providing the following and click Next.

      1. Domain Name

      2. Global Catalog Server

      3. Username

      4. Password

    5. Enter the Directory Sync Registration URL and Agent Registration Key information and click Next.

    6. In the sIDHistory Migration section, you may skip this step if sIDHistory Migration is not part of your project scope.

Note, Refer to On Demand Migration Active Directory User Guide for detailed information about agent installation and set-up requirements.

  1. Once the agent is installed and the environment is discovered, click on the Setting button to access the local AD environment setting page.

  2. Click on the Organization Unit tab and define the OU filter based on your project scope.

  3. Click on the Filters tab and define any LDAP filter based on your project scope.

  4. Click Save.

  5. Repeat steps 2 – 11 for the next local environment.

 

 

Once both local environments are configured, the next step will be to prepare the environment for Real Time Password Synchronization. Password Monitoring must be configured in your source environment. 

  1. Navigate to Environments.

  1. Select the source environment where you would like Directory Sync to monitor password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Select an agent to use for monitoring password changes from the Agent Drop down list.

  4. Download the Password Filter Plugin and save it in a secure place for later use. 

  5. Click on the Domain Controllers tab.

  6. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

 

Enable target environment for Password Changes    

Allow Password Changes must be enabled in your target environment for Directory Sync to synchronize Passwords when they are changed in the source environment.  

  1. Navigate to Environments.

  1. Select the target environment where you would like Directory Sync to write password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Check the checkbox for Allow Password Changes from Other Environments.

  4. Click on the Domain Controllers tab.

  5. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

Enable target environment for Password Changes

Setup Environments

To begin at least two (2) Active Directory environments must be configured in Directory Sync. At the end of this section, there will be two (2) Active Directory environments fully configured. Note, it's essential to install the Directory Sync Agent with version 20.12.13 or higher.

An environment is an end-point connection that can control the scope of objects read. This guide will walk through how to create the source and target active directory environments.

To create a local AD environment, the following are required

  • One (1) Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows. This Administrator Account should also meet the Password Synchronization requirement as stated in the Account Permissions section above.

  • One (1) Windows Server to install and host the Directory Sync Agent.

Follow these steps to setup the local environment endpoints.  

  1. Navigate to Environments.

  1. Click the New button.

  2. Click Local as the environment type, click Next.

  3. Name the environment, click Next.

  4. Name the local agent, click Next.

  5. Note the agent registration URL and registration Key for later use, click Finish.

  6. Install the agent in the Windows Server that is joined to the local AD domain.  

    1. Launch the Directory Sync Agent installation in the target workstation or server.

    2. Accept the license agreement and click on next.

    3. Specify the Passphrase to be used to communicate with Password Filter installed on the Domain Controller. (You may select Use Legacy Password Sync if you do not plan to use the Modern Password Sync)

      A screenshot of a computer screen Description automatically generated

    4. Enter the target active directory environment information by providing the following and click Next.

      1. Domain Name

      2. Global Catalog Server

      3. Username

      4. Password

    5. Enter the Directory Sync Registration URL and Agent Registration Key information and click Next.

    6. In the sIDHistory Migration section, you may skip this step if sIDHistory Migration is not part of your project scope.

Note, Refer to On Demand Migration Active Directory User Guide for detailed information about agent installation and set-up requirements.

  1. Once the agent is installed and the environment is discovered, click on the Setting button to access the local AD environment setting page.

  2. Click on the Organization Unit tab and define the OU filter based on your project scope.

  3. Click on the Filters tab and define any LDAP filter based on your project scope.

  4. Click Save.

  5. Repeat steps 2 – 11 for the next local environment.

 

 

Prepare source environment for Password Monitoring

Once both local environments are configured, the next step will be to prepare the environment for Real Time Password Synchronization. Password Monitoring must be configured in your source environment. 

  1. Navigate to Environments.

  1. Select the source environment where you would like Directory Sync to monitor password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Select an agent to use for monitoring password changes from the Agent Drop down list.

  4. Download the Password Filter Plugin and save it in a secure place for later use. 

  5. Click on the Domain Controllers tab.

  6. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

 

Enable target environment for Password Changes    

Allow Password Changes must be enabled in your target environment for Directory Sync to synchronize Passwords when they are changed in the source environment.  

  1. Navigate to Environments.

  1. Select the target environment where you would like Directory Sync to write password changes and click on SETTINGS.

  2. Click on the PASSWORDS tab.

  3. Check the checkbox for Allow Password Changes from Other Environments.

  4. Click on the Domain Controllers tab.

  5. Select at least one Domain Controller per domain in the environment and enable the Modern Password Copy checkbox. This domain controller will be used to install the Password Filter Plugin in the later steps.

A screenshot of a computer Description automatically generated

  1. Click Save, then Click Back.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating