This page is for older ‘pull based’ user synchronization, which reads AzureAD information via GraphAPI.
We have newer and better ‘push based’ SCIM user synchronization, which should be used if you are implementing new user data synchronization.
General
Expand | ||
---|---|---|
| ||
Three are three different syncs:
User Sync is used for managing users in BenePortal. Directory sync of existing users is used for keeping directory information of users up to date. User is someone having Benemen services. Directory sync of directory entries is used for creating, updating and removing directory entries in Benemen directory. A directory entry is just an object in the Benemen directory and does not have any Benemen services. |
Expand | ||
---|---|---|
| ||
SyncModule reads AzureAD data via Azure GraphAPI over HTTPS connection. User data in Benemen systems is updated based on data in AzureAD. All syncs are configured to happen as a scheduled job. The default interval is 24h. |
Expand | |||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||
As SyncModule use GraphAPI to read AzureAD data, mappings must be done using property names of user resource type of GraphAPI. See GraphAPI documentation for the full list https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#properties Note, that the naming of some attributes/properties differ between On-Prem AD and AzureAD and also between AzureAD and GraphAPI. Some common examples below:
|
Expand | ||
---|---|---|
| ||
For all Syncs:
For User sync following must be defined:
Directory sync of existing users:
Directory sync of directory entries:
|
...
Expand | ||
---|---|---|
| ||
User removal happens, if a user is removed from the AzureAD group defined to be synced to BenePortal or the user is deleted from AzureAD. There are two options for user removals:
By default removed users are only added to the user sync report and actual removal must be done manually. Report I sent to as email to defined email-addresses. If automatic termination is used, user and users services are terminated immediately. This option should be used only if there is no number porting needs or other similar cases requiring more controlled termination. |
...