A.5 Synchronizing Active Directory User Accounts

Synchronizing Active Directory user accounts allows you to retrieve information about the user associated with a particular event, such as the user name, the user’s email address, and the user’s contact details. The user information comes from the Active Directory server in your environment. You can also view all the user’s recent activities.

Using the Change Guardian web console, you add one or more user containers and the user attributes that you want to synchronize.

To view and manage synchronized Active Directory accounts:

  1. In the Change Guardian web console, click Integration.

  2. Click AD Accounts.

A.5.1 Adding a User Container

Active Directory stores user accounts in containers. You can add one or more containers to Change Guardian to synchronize the users accounts.

To add a user container to Change Guardian:

  1. In the Change Guardian web console, click Integration > AD Accounts > Add User Container.

  2. Provide the appropriate information for the user container you want to synchronize.

A.5.2 Mapping User Profile Fields

To synchronize Active Directory user accounts to Change Guardian, Change Guardian needs to map the user account field names in Active Directory to an attribute in your directory service. By default, Change Guardian maps the most commonly used field names, but you can add or remove mappings as necessary.

To modify user profile mapping, in the Change Guardian web console, click Integration > AD Accounts > User Profile Mapping.