Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleWhat different sync options there are?

Thre Three are three different syncs:

  • User Sync (BenePortal)

  • Directory sync of existing users

  • Directory sync of directory entries

User Sync is used for managing users in BenePortal.

Directory sync of existing users is used for keeping directory information of users up to date. User is someone having Benemen services.

Directory sync of directory entries is used for creating, updating and removing directory entries in Benemen directory. A directory entry is just an object in the Benemen directory and does not have any Benemen services.

Expand
titleHow AzureAD syncs work

SyncModule reads AzureAD data via Azure GraphAPI over HTTPS connection.

Expand
titleWhat is needed to configure AzureAD syncs?

For all Syncs:

  • App registration must be added to customers AzureAD tenant.

For User sync following must be defined:

  • AzureAD group of which members will be synced

  • Attribute mappings

  • Removal policy

  • Email address for sync reports

Directory sync of existing users:

  • Attribute mappings

Directory sync of directory - entries:

  • AzureAD group of which members will be synced as directory-entires

  • Attribute mappings

...

Expand
titleHow users to be synced is defined in UserSync?

Users to be synced in BenePortal is defined by being a member of a specified group in AzureAD. All users belonging in the group or any of its nested subgroups will be included in the sync.

Expand
titleWhich aBenePortal BenePortal fields can be mapped

Following BenePortal fields are mandatory

  • UserEmail

  • FirstName

  • LastName

  • ContractName

  • BillingContractName

  • CostCenter

Following BenePortal fields are optional

  • AltEmail (Alternative email to send password recovery emails etc.)

  • UserCountry

  • UserRegion (TZ-format (Europe/Helsinki etc.))

  • UserLanguage (RFC 1766 format (fi-FI, en-GB etc.))        

  • ExtAuthUserName

  • ExtAuthDomain

...