inSync automatically imports users (auto-import) and their details from AD/LDAP based on the criteria that inSync administrators define while creating AD/LDAP Mappings. A user can belong to multiple AD/LDAP Mappings depending on the defined criteria. In such a case, user is imported through an AD/LDAP Mapping that is the oldest in all relevant AD/LDAP Mappings in inSync.
When you define multiple AD/LDAP Mappings, inSync by default, gives priority to the oldest AD/LDAP Mapping. You can view the priority of all the available AD/LDAP Mappings on the AD/LDAP Mappings page. AD/LDAP Mapping listed at the top has the highest priority while the one at the bottom has the lowest priority. By default, the latest AD/LDAP Mapping defined is assigned the lowest priority.
inSync provides an option to change the priority of an AD/LDAP Mapping after you create it.
Assume you have defined two AD/LDAP Mappings that have the following criteria,
- General Users Mapping
- Import all users who reside in US-East region
- Assign them to General Profile 1
- Per user storage - 5 GB
- Executive Users Mapping
- Import Executive users, who are also part of General users, that reside in US-East region
- Assign them to Executive Profile
- Per user storage - 50 GB
General Users Mapping is created before Executive Users Mapping.
Here is how inSync imports users based on the criteria defined in the AD/LDAP Mappings,
Executive users fall under both the Mappings. As General Users Mapping is created before the Executive Users Mapping, by default, it has the first priority. inSync imports all the users, including Executive users, from AD/LDAP and assigns them to General Profile 1 and storage of upto 5 GB.
However, you want Executive users assigned to Executive Profile and storage usage of 50 GB. In this case, you must change the priority of Executive Users Mapping from lowest to highest. inSync will then first import Executive users and assign them to Executive Profile and then import all other General users and assign them to General Profile.
To change priority of an AD/LDAP Mapping,
- On the inSync Management Console, click Manage > Deployments > AD/LDAP. AD/LDAP page with details of existing AD/LDAP Mappings appears.
- Click the AD/LDAP Settings tab.
- In the AD/LDAP Priority area, you can see the existing AD/LDAP Mappings as per their defined priority. Click Edit to change the priority of an AD/LDAP Mapping.
- AD/LDAP Priority for User Import window with list of all the AD/LDAP Mappings appears. Select an AD/LDAP Mapping to change its priority.
- Use the following options appropriately to change the priority of the selected AD/LDAP Mapping,
- Move Up - Click this button if you want to increase priority one level up.
- Move Down - Click this button if you want to decrease priority one level down.
- Move to Top - Click this button if you want to change the priority to the highest.
- Move to Bottom - Click this button if you want to change the priority to the lowest.
- Click Save.
Priority of the selected AD/LDAP Mapping is updated. inSync imports users based on the updated priority of the AD/LDAP Mapping.