Specifying Which Users and Groups to Synchronize

When you set an authentication source to synchronize users and/or groups from a source user repository, you can specify which users and groups to synchronize.

Note: When you synchronize users/groups, new users/groups are imported into the portal and deleted users/groups are removed from the portal.

If the Authentication Source Editor is not already open, open it now.
Click the Synchronization page.
Specify which users and groups to synchronize.
- To import all users and groups from the source domain, select Full Synchronization.
  
  Each time you run the job associated with this authentication source all users and groups will be synchronized with the portal.
- To import the users from selected groups, but not all of the users found on the source domain, perform the following steps:
  1. Select Partial Users Synchronization.
  2. Run the job associated with this authentication source.
    
    All of the groups in the source user repository are imported into the portal, but no users are imported.
  3. Return to the Authentication Source Editor and click the Fully Synchronized Groups page.
  4. Select the groups you want to fully synchronize.
  5. Run the job associated with this authentication source again.
    
    Each time you run the job associated with this authentication source all groups are synchronized, but the only users that are synchronized are the ones that are members of the fully synchronized groups.
- To import all users, but only selected groups, perform the following steps:
  1. Select Full Synchronization or Partial Users Synchronization.
  2. Run the job associated with this authentication source.
  3. Delete all unwanted groups from the portal.
  4. Return to the Authentication Source Editor and click the Synchronization page.
  5. Select Partial Groups Synchronization.
  6. Run the job associated with this authentication source again.
    
    Each time you run the job associated with this authentication source all users are synchronized, but no new groups are imported. Groups are still removed from the portal if they are deleted from the source user repository.
- To import selected users and selected groups, perform the following steps:
  1. Select Partial Users Synchronization.
  2. Run the job associated with this authentication source.
    
    All of the groups on the source domain are imported into the portal, but no users are imported.
  3. Delete all unwanted groups from the portal.
  4. Return to the Authentication Source Editor and click the Fully Synchronized Groups page.
  5. Select the groups from which you want to import users.
  6. Click the Synchronization page.
  7. Select Partial Users and Partial Group Synchronization.
  8. Run the job associated with this authentication source again.
    
    Each time you run the job associated with this authentication source the only users that are synchronized are the ones that are members of the fully synchronized groups, and no new groups are imported. Groups are still removed from the portal if they are deleted from the source user repository.
- To import no users or groups, choose No Synchronization.
If users from another authentication source are members of groups from this authentication source or vice versa, select Import user and group memberships from other authentication sources.
In the Import batches of box, type the number of users you want to import at a time. The default batch setting is 1000 users. Some databases cannot support a batch of 1000; the most common reason is that the database runs out of space in the rollback segment because it attempts to add all 1000 users within one transaction. This situation terminates the transaction, and no users are imported.
Note: Raising the import batch number can improve the time it takes to synchronize.

Parent topic: About Importing and Authenticating Users with Authentication Sources

AquaLogic Interaction Administrator Guide

Specifying Which Users and Groups to Synchronize