Synchronizing directories synchronizing-directories
To synchronize domains, you can choose to do a manual or scheduled synchronization. A manual synchronization synchronizes any selected domains. A scheduled synchronization synchronizes all domains.
Directory synchronization is used to pull details from the directory servers that you specified in your directory settings into the User Management database. Later, you can also do a manual synchronization if changes or updates occur on the directory servers. For example, you can do a manual synchronization if users and groups are added or changes are made to a user’s account.
You can also set a daily synchronization schedule to automatically synchronize the User Management database with changes or updates to the source directory servers. However, this process uses network and server resources. Choose low-usage time periods and avoid scheduling unnecessary synchronizations that tie up system and network resources. To minimize unnecessary synchronizations, use the immediate synchronize option instead.
You can also specify whether to push user and group information into Adobe LiveCycle Content Services 9 (deprecated) when synchronizing domains.
Enable delta directory synchronization enable-delta-directory-synchronization
Delta directory synchronization improves the efficiency of directory synchronization. When delta directory synchronization is enabled, User Management synchronizes only users and groups that have been added or updated since the last synchronization.
User Management performs the following steps when delta directory synchronization is enabled:
- Fetch all users from the directory servers but update the User Management database with only the users whose timestamp has changed.
- Fetch all groups but update the User Management database with only the groups whose timestamp has changed.
- Fetch group members only for the groups whose timestamps have changed and update the User Management database with that information.
- In administration console, click Settings > User Management > Domain Management.
- Under Delta Synch, select the check box and click Save.
- Edit the directory settings for each of the enterprise domains that will use the delta directory synchronization feature. On the User Settings and Group Settings pages, locate the Modify Timestamp setting and enter
modify TimeStampas the value. For details about editing enterprise domains, see Editing and converting existing domains.
Enable or disable detailed logging during synchronization enable-or-disable-detailed-logging-during-synchronization
By default, User Management logs detailed statistics during the synchronization process.
- In administration console, click Settings > User Management > Configuration > Configure Advanced System Attributes.
- Under Synch Statistics Logging, deselect the check box to disable the detailed logging or select it to enable logging, and then click Save.
Configure the directory synchronization retry option configure-the-directory-synchronization-retry-option
You can configure User Management to periodically check for any failed directory synchronization attempts. User Management then tries to complete the failed synchronizations.
-
In administration console, click Settings > User Management > Configuration > Configure Advanced System Attributes.
-
Under Synch Finisher Cron Expression, enter a cron expression that represents the interval at which User Management retries failed synchronizations. The cron expression usage is based on the Quartz open source job-scheduling system, version 1.4.0.
The default is 0 0/13 * ? * , which means the check occurs every 13 minutes.
Manually synchronize directories manually-synchronize-directories
-
In administration console, click Settings > User Management > Domain Management.
-
(Optional) To push user and group information into Content Services (Deprecated), select the Select This Option For Pushing Users And Groups Into Registered External Principal Storage Providers option. This option also applies when adding new users and groups through the Users and Groups page.
-
Select the check box for each enterprise domain to synchronize and click Sync Now.
If you select multiple domains, the domain synchronization for all domains can be run at the same time. However, if you select the domains separately, only one domain synchronization can run at a time.
Schedule directory synchronization schedule-directory-synchronization
-
In administration console, click Settings > User Management > Domain Management.
-
Schedule synchronization:
- To enable automatic synchronization on a daily basis, under Scheduler, select Occurs. Select Daily from the list and type the time in the 24-hour format in the corresponding box. When you save your settings, this value is converted to a cron expression, which is displayed in the Cron Expression box.
- To schedule synchronization on a particular day of the week or month, or in a particular month, select Cron Expression and type the appropriate expression in the box. For example, synchronize at 1:30 A.M. on the last Friday of the month.
The cron expression usage is based on the Quartz open source job-scheduling system, version 1.4.0.
- To turn off automatic synchronization, select Occurs and select Never from the list.
- (Optional) To push user and group information into Content Services (Deprecated), select the Select This Option For Pushing Users And Groups Into Registered External Principal Storage Providers option. This option also applies when adding new users and groups through the Users and Groups page.
- Click Save.
Stop all directory synchronizations currently in progress stop-all-directory-synchronizations-currently-in-progress
- In administration console, click Settings > User Management > Domain Management.
- Click Abort. This button is displayed only while a directory synchronization is in progress.