This Server Task synchronizes the Users and User Groups information from a source such as Active Directory, LDAP parameters, etc.
To run this task, click Admin > Server Task >User Synchronization > New...
Enter basic information about the task, such as the Name, Description (optional) and Task Type. The Task Type defines the settings and behavior of the task. Select the check box next to Run task immediately after finish to have the task run automatically after you click Finish.
Expand Settings and click Select under User Group name - By default, the root for synchronized users will be used (by default, this is the All group). Alternatively, you can create a new User Group.
You can set collision handling to:
Skip - user is not added to ERA during synchronization with Active Directory.
Overwrite - existing user in ERA is overwritten by the user from Active Directory, in the case of an SID conflict the existing user in ERA is removed from its previous location (even if the user was in a different group).
NOTE: If you use custom attributes for a user set User creation collision handling to Skip. Otherwise the user (and all details) will be overwritten with the data from Active Directory loosing custom attributes. If you want to overwrite the user, change User extinction handling to Skip.
Server connection settings:
Distinguished name - Path (Distinguished Name) to the node in the Active Directory tree. Leaving this option empty will synchronize the entire AD tree.
User group and user attributes:
A users default attributes are specific to the directory to which the user belongs.
Advanced user attributes:
If you want to use advanced custom attributes select Add New. This field will inherit the user's information, which can be addressed in a policy editor for iOS MDM as a placeholder.
Review the configuration information displayed here and if it is ok, click Finish. The task is now created and ready to be used.