Specifying Which Users and Groups to Synchronize
When you set an authentication source to synchronize users
and/or groups from a source user repository, you can specify which
users and groups to synchronize.
Note: When you synchronize users/groups, new users/groups
are imported into the portal and deleted users/groups are removed
from the portal.
- If the Authentication
Source Editor is not already open,
open it now.
- Click the Synchronization page.
- Specify which users and groups to synchronize.
To import all users and groups from the source domain,
select Full Synchronization.
Each time
you run the job associated with this authentication source all users
and groups will be synchronized with the portal.
- To import the users from selected groups, but not all of the
users found on the source domain, perform the following steps:
- Select Partial Users Synchronization.
Run the job associated with this authentication source.
All of the groups in the source user repository are imported into
the portal, but no users are imported.
- Return to the Authentication Source Editor and click the Fully Synchronized Groups page.
- Select the groups you want to fully synchronize.
Run the job associated with this authentication source again.
Each time you run the job associated with this authentication
source all groups are synchronized, but the only users that are synchronized
are the ones that are members of the fully synchronized groups.
- To import all users, but only selected groups, perform the
following steps:
- Select Full Synchronization or Partial Users Synchronization.
- Run the job associated with this authentication source.
- Delete all unwanted groups from the portal.
- Return to the Authentication Source Editor and click the Synchronization page.
- Select Partial Groups Synchronization.
Run the job associated with this authentication source again.
Each time you run the job associated with this authentication
source all users are synchronized, but no new groups are imported.
Groups are still removed from the portal if they are deleted from
the source user repository.
- To import selected users and selected groups, perform the
following steps:
- Select Partial Users Synchronization.
Run the job associated with this authentication source.
All of the groups on the source domain are imported into the portal,
but no users are imported.
- Delete all unwanted groups from the portal.
- Return to the Authentication Source Editor and click the Fully Synchronized Groups page.
- Select the groups from which you want to import users.
- Click the Synchronization page.
- Select Partial Users and Partial Group Synchronization.
Run the job associated with this authentication source again.
Each time you run the job associated with this authentication
source the only users that are synchronized are the ones that are
members of the fully synchronized groups, and no new groups are imported.
Groups are still removed from the portal if they are deleted from
the source user repository.
- To import no users or groups, choose No Synchronization.
- If users from another authentication source are members
of groups from this authentication source or vice versa, select Import user and group memberships from other authentication sources.
- In the Import batches of box, type
the number of users you want to import at a time.
The default batch setting is 1000 users. Some databases cannot
support a batch of 1000; the most common reason is that the database
runs out of space in the rollback segment because it attempts to add
all 1000 users within one transaction. This situation terminates the
transaction, and no users are imported.
Note: Raising the import batch
number can improve the time it takes to synchronize.