GroupID Self-Service

Accurate Data in Active Directory

Accurate data in Active Directory is essential for security and productivity. Active Directory synchronization should be simple to do; using schema detection, GroupID Synchronize will detect changes in either source and replicate that change bi-directionally to the destination. Whether you are synchronizing SQL, Oracle or any other data source with Active Directory, you will always be sure that accurate data is in all of your systems.

“We did not have any problems installing and setting-up the software and it has been running very smoothly ever since. The issues we dealt with related to matching our internal processes to what was needed to make synchronization work.”

Jeremy Pinquist
Network Manager – The Juilliard School

Security Benefits of provisioning and de-provisioning

According to a recent survey by Osterman Research, in the average organization, IT doesn’t know to de-provision an account for 9 days after a user has left the organization. And, on average, 5% of the users in Active Directory are no longer employed by the organization. This is a security flaw. GroupID Synchronize reduces that 9 days to near real-time. And, assuming that the authoritative HR source is accurate, GroupID Synchronize removes those 5% that are no longer employed.

Those same issues occur in the inverse for a new employee. If IT doesn’t know to provision a new account for 9 days, what is that employee doing? Probably nothing on a computer. By using GroupID Synchronize to provision new users to Active Directory and Exchange, these new employees can be up and running immediately.

Internal Turnover

Another issue is internal turnover. The same survey reported that on average 19% of employees change job responsibilities in a given year. All of that information needs to be put into Active Directory: new job title, new location, new billing codes and on and on. By utilizing GroupID Synchronize you can get the information into Active Directory or any other important system such as your financial system, CRM, and others.

Pertinence to Active Directory Group Management

Accurate data is essential to properly automating group membership. GroupID Automate will ensure that a user is in the correct group if the user’s data (department, title, location) is correct. GroupID Synchronize will make sure that data is correct. This enhances security and productivity. Consider the de-provisioning example above. Even if you don’t de-provision the user immediately, taking them out of all security groups will basically ensure that they do not have access to any systems, effectively giving you a double-pronged approach to security for ex-employees.

How Does Group ID Synchronize Do It?

GroupID Synchronize is a bi-directional synchronization engine. Utilizing a very intuitive GUI to build scripts, you can create jobs to provision, de-provision or Synchronize multiple data sources. Picture Active Directory being your hub and becoming the accurate source for all data. Synchronize directly connects two data sources through a job. It does not use or require a staging area or meta directory. A job defines the connection information needed to access each data source, how the data is related and how the data should flow.

For example, let’s say you have employee information stored in an Oracle table and you want to update users in Active Directory with this information. You would start by launching Synchronize and creating a new job. The job wizard will walk you through the process. You first provide the connection information to Oracle and Active Directory (the name of the server, the table, and credentials to use, etc.). Synchronize will then examine the data sources and provide you with a list of attributes available in Oracle and Active Directory. Select the attributes in Active Directory that you would like to populate from Oracle.

Next the wizard will ask how to find related records. Typically there are one or more columns in your source (the Oracle table in this case) that match one more attributes in Active Directory. This might be an employee identification number, user ID or just by their name. Once you have the relationship defined via the key fields it is time to connect the columns in the Oracle table or view to attributes in Active Directory. You can directly connect the attributes or you can use transformations (synchronize scripts) to calculate the value of an attribute.

Once the wizard is complete you can run a Preview to see what would happen. During the preview Synchronize loads the records from the Oracle table and looks for matching records in Active Directory. It calculates what would change without actually changing anything in Active Directory.

Once it is complete you can review what would change and if everything looks good you can choose Run to actually make the changes. If the results are not what you expected you can go back into the wizard and reconfigure the job until you get the results you want. With the ability to use transforms to create new fields (usernames for example) and match all other fields, Synchronize is the easiest and most powerful tool to ensure that all of your records in Active Directory are always accurate.

Features & Benefits

All new console

Scripting

Preview changes

Email notification

Job histories

Power tools

Key features

Key benefits

System Requirements

Operating system

Import data sources

Target systems

Recommended hardware

Data Sheet