User synchronization

Edit online

The Sync now process run from the Identity feed screen initiates the user synchronization. You can either Upload CSV generated from the HR tenant (for example, Workday) or trigger a full manual sync. The User synchronization can be used to view the fetched results . It helps the administrator to analyze the details relevant to different operations performed during a user synchronization.

Before you begin

Note: User synchronization is a requestable feature, VDEV-1620. To request this feature, contact your IBM Sales representative or IBM contact and indicate your interest in enabling this capability. You can also create a support ticket if you have the permission. IBM® Verify trial subscriptions cannot create support tickets.
  • You must have administrative permission to complete this task.
  • Log in to the IBM Verify administration console as an Administrator. For more information, see Accessing IBM Verify.

Procedure

  1. Log in as an administrator on IBM Verify. Navigate to the profile icon and click Switch to admin.
  2. Select Directory > User synchronization.
  3. The opened User synchronization screen displays the following details and helps perform different operations.
    • Set a specific duration and click Fetch operation to filter the triggered user synchronization results based it.
    • Use Filters to filter the results based on the provided criteria.
    • Click the refresh icon to refresh the table records.
    • The table provides the Type, Identity feed name, Status, Start time and End time details about the Identity feed record.

      The Start time and End time marks the time when the synchronization starts and ends.

      The following Status are displayed for the fetched results:
      Table 1. Result status
      Status Description
      Success The status is displayed for user synchronization, where all the performed operations are successfully executed.
      Failed The status is displayed for user synchronization, where all the performed operations failed during execution.
      Cancelled The status is displayed for user synchronization that was either in progress or submitted and then cancelled. For user synchronization that is in progress before cancellation, only the Start time is displayed. For user synchronization that is in queue before cancellation, the Start, and End time are not displayed.
      In progress The status is displayed for user synchronization that is not complete.
      Submitted The status is displayed for user synchronization that is in queue and the process starts after the existing synchronization in progress gets completed.
      Warning The status is displayed for records where there are success, failed, or modified operations.
  4. Click the identity feed record to open its respective Summary panel. The panel displays the Status, General information, and Details about the record.
    You can click the individual Operation type (Created, Deleted, Modified, or Failed) to open the user synchronization results for the respective operation. Alternatively, click User synchronization results to open the collective results.
  5. The opened screen displays the following details.
    • The number of Total users, Created, Modified, Failed, and Deleted.
    • Use Filters to filter the results based on the provided criteria.
    • The table details about the Username, Operation status, Operation type, and Operation date.
      Note: In an identity feed configuration, if the Grace period (Days) is greater than 0 for Delete user action then the user account remains suspended for that duration and is considered under Modified operation type. The user account gets deleted after the grace period.
    • The Operation date marks the date and time when the operation was performed in IBM Verify.
    • You can select multiple Failed operations and click Retry to process the user synchronization for those records.
  6. Click the result record to open the Summary panel. For Failed operations, the panel displays about the error Code, and Description details.
    • Click the Retry icon to process the user synchronization for the particular record again.
    • Click View attributes to open All attributes screen that displays the user’s target values for the mapped attributes. It displays the missing target value.