Overview
inSync automatically imports users and their details from AD/LDAP based on the criteria that inSync administrators define while creating AD/LDAP Mappings. A user can belong to multiple AD/LDAP Mappings depending on the defined criteria. In such a case, the user is imported through an AD/LDAP Mapping that is the oldest in all relevant AD/LDAP Mappings in inSync.
When you define multiple AD/LDAP Mappings, inSync by default gives priority to the oldest AD/LDAP Mapping. You can view the priority of all the available AD/LDAP Mappings on the AD/LDAP Mappings page.
📝 Note
AD/LDAP Mapping listed at the top has the highest priority while the one at the bottom has the lowest priority.
By default, the most recent AD/LDAP Mapping that has been defined is assigned the lowest priority.
inSync provides an option to change the priority of an AD/LDAP Mapping after you create it.
Example scenarios
Assume you have defined two AD/LDAP Mappings that have the following criteria,
General Users Mapping
Import all users who reside in the US-East region
Assign them to General Profile 1
Per-user storage - 5 GB
Executive Users Mapping
Import Executive users, who are also part of General users, that reside in the US-East region
Assign them to Executive Profile
Per-user storage - 50 GB
The General Users Mapping was created before Executive Users Mapping. Here is how inSync imports users based on the criteria defined in the AD/LDAP Mappings,
Executive users fall under both the Mappings. As General Users Mapping is created before the Executive Users Mapping, by default, it has the first priority. inSync imports all the users, including Executive users, from AD/LDAP and assigns them to General Profile 1 and storage of up to 5 GB.
However, you want Executive users assigned to Executive Profile and storage usage of 50 GB. In this case, you must change the priority of Executive Users Mapping from lowest to highest. inSync will then first import Executive users and assign them to Executive Profile and then import all other General users and assign them to General Profile.
Procedure
To change the priority of an AD/LDAP Mapping:
Go to the inSync Management Console and click Users > User Provisioning.
On the User Provisioning page, you can view the details of existing mappings. Locate the vertical three-dot menu next to New Mapping and click on it.
Select Set Mapping Priority Order from the options provided.
In the Edit Mapping Priority Order section, you can view the existing mappings listed according to their defined priorities.
Choose the mapping whose priority you want to change.
Utilize the following options appropriately to adjust the priority of the selected mapping:
Move Up: Click this button to increase the priority by one level.
Move Down: Click this button to decrease the priority by one level.
Move to Top: Click this button to set the priority to the highest level.
Move to Bottom: Click this button to set the priority to the lowest level.
Click Save.
The priority of the selected mapping is updated. inSync classifies users based on the updated priority of the mapping and assigns them the profile and storage.