Connector Guides › Connectors Guide › Provisioning with CA IAM CS › Set Up Synchronization with Active Directory › Create a Directory Synchronization Template

Create a Directory Synchronization Template

Synchronization templates control how local changes are propagated to your endpoints, and how they are formatted. You can create synchronization templates for each of the endpoint types you want to control from your ADS installation. You can also create multiple templates for a single endpoint to subdivide the synchronization data, by business unit, for example.

Add one or more templates to each directory monitor in your environment. Add directory monitors before you can add synchronization templates.

Follow these steps:

1. Log in to CA IAM CS, and select the Endpoints tab to see the available endpoints that you can synchronize with.
2. Select the Directory Sync tab, then click the monitor entry where you want to add a synchronization template, and click Add in the Template area.

   The Add Template dialog appears.

3. Select the template type that you want from the drop-down menu, and then select an available endpoint name.
4. Select the User Store tab to set User Store details:
   1. Click Add in the Trigger Groups area.
   2. Enter a filter value if you want to refine the search for available groups. You can also accept the default in the Add Trigger group dialog.
   3. Click Search.

      A list of available Active Directory groups appears.

   4. Select the group or groups you want using the shuttle control, and click OK.
5. Select the Attributes tab to configure how the template maps Active Directory source information to the target endpoint:

   A list of default attributes appears. Attributes that are required for your template type are displayed in bold type.

   1. Set required attribute mappings by selecting available mapping targets from the Maps To pull-down menu. You can also type a literal string.
   2. Set mappings for other available attributes as desired. Select a policy setting (WEAK or STRONG) for each mapping you add.

      For single-value attributes, you need only be sure that the policy is not NONE. For multivalue attributes, Strong replaces any existing attribute value in the endpoint, and weak adds the new attribute value to any existing endpoint values.

   3. If the standard mapping table does not meet your needs, use the advanced editor. Click Advanced to display the editor. The advanced editor allows you to:
      • Use JavaScript evaluated attribute values.
      • Pick object references for association values.
      • Set alternate attribute mappings or default values that apply when the primary mapping cannot be resolved.
6. Click OK.