Active Directory Synchronization
Passly supports Active Directory Synchronization using the following Agents.
Directory Synchronization (DirSync) article.
Advanced User Synchronization (AUSI) article.
Agent Migration
If you have previously deployed either agent to enable synchronization of Active Directory to Passly this guide will help you through the migration process.
Prerequisites
- Directory Sync (DirSync) or Advanced User Synchronization (AUSI) agent is installed.
- Passly Organization has Users, Groups synchronized from Active Directory with a Sync Source linked to your DirSync (AUSI) agent;
- Migration to another Windows Server is planned;
-
No existing Users, Groups re-synchronization and re-onboarding to Passly is needed.
Supported operating systems and installation requirements
Operating Systems
- Windows Server 2016
- Windows Server 2019
- Windows Server 2022
Microsoft .NET
- .NET v4.8 minimum. Microsoft Installer.
Migration to another Windows Server
Migration to another Windows Server includes the following steps:
- Current agent uninstall and complete remove;
- New Provisioning Policy create;
- New agent install.
If you decided to move to another Windows Server so that Users and Groups are re-synced with the agent installed on the new server, your current DirSync (AUSI) agent must be un-installed and removed.
DirSync agent uninstall
To uninstall a DirSync agent go to the Control Panel -> Uninstall a program -> Passly Directory Sync Agent -> Uninstall.
To remove a redundant agent from Passly go to Directory Manager -> Directory Sync -> your DirSync agent -> Delete.
Go to Directory Manager -> Users/Groups and make sure they have a Local Sync Source.
AUSI agent uninstall
To uninstall an AUSI agent go to the Control Panel -> Uninstall a program -> Passly Advanced User Sync Integration -> Uninstall.
To remove redundant agent from Passly go to Directory Manager -> Directory Sync -> your AUSI agent -> Delete.
Go to Directory Manager -> Users/Groups and make sure they have a Local Sync Source.
After completing these steps, you can install the new DirSync (AUSI) agent on your new Windows Server using one of the following articles Adding Active Directory Synchronization or Adding Advanced User Synchronization Integration Agent (AUSI).
The important thing here is to set a Provisioning Policy for the new agent so it could merge existing Users so that re-onboarding does not occur.
Go to Policy Manager -> Provisioning -> Create a New Policy and check "Have Sync Agent attempt to detect existing users", press "Add Policy".
During DirSync (AUSI) agent creation in Passly choose the Provisioning Policy previously created.
Install a new DirSync (AUSI) agent on Windows Server as normal and wait till the Users/Groups in the Directory Manager are synchronized and their Sync Source is linked to your new agent. At this step migration is complete successfully.