To specify strong or weak synchronization, click the Account Template tab on the property sheet and select or clear the Strong Synchronization check box.
Weak synchronization ensures that global users have the minimum capability attributes that their accounts should possess. Weak synchronization is the default in most endpoint types. If you update a template that uses weak synchronization and accept the option to update associated accounts, CA Identity Manager updates capability attributes as follows:
If an account belongs to other account templates (whether those templates use weak or strong synchronization), CA Identity Manager consults only the template that is changing. This is more efficient than checking every account template. Because weak synchronization only adds capabilities to accounts, it generally is not necessary to consult those other account templates.
Note: When propagating from a weak synchronization account template, changes that would remove or lower capabilities could leave some accounts unsynchronized. Remember that with weak synchronization, capabilities are never removed or lowered. Without consulting other templates for an account, the propagation does not consider if weak synchronization is sufficient.
A subsequent Synchronize Account with Account Templates might be needed to properly synchronize an account with its account templates. For this operation, you use Provisioning Manager.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |