Synchronized Attributes Between The System And AD
The integration of the system and AD allows you to configure the attributes that need to be synchronized. You can see the list of all attributes in the table. Any custom attributes are available for synchronization as well.
| Attribute | Value | Type |
|---|---|---|
| sAMAccountName | User account name (pre-Windows 2000) | Base |
| userAccountControl | Account status | Base |
| employeeID | Personnel number | Base |
| sn | Last name | Base |
| GivenName | First name | Base |
| middleName | Patronymic | Base |
| Base | ||
| objectGUID | Unique identifier | Mandatory |
| userPrincipleName | User account name | Mandatory |
| distinguishedName | Distinguished name | Mandatory |
| objectClass | Allows you to set the type (class) of the desired object; can take multiple values | Mandatory |
| objectCategory | Allows you to set the type (class) of the desired object; has only one value | Mandatory |
Base synchronized attributes are the attributes that can be disabled for synchronization without affecting the integration that will remain in a stable state. If all base attributes are disabled, synchronization is not executed.
After the subsystem is launched, the base attribute schema in the database is verified.
Mandatory synchronized attributes are the attributes that, if disabled, can lead to an unstable integration state. They are not stored in the database and they cannot be disabled. The mandatory synchronized attributes are always requested along with the base attributes from Active Directory. The attributes can be configured in the web interface.
Was the article helpful?