Transferring Active Directory accounts to KYDSO for the first time
As part of the setup of KYDSO, an interface to the HR system and account reconciliation with the Active Directory of the customer system are set up.
If an account is imported during account reconciliation that does not yet exist in KYDSO, it is created as an Unmanaged Account in KYDSO. The system checks whether the defined mandatory attributes are present. If not, a work order is created with which you can add the missing account data: Complete account data
The imported accounts must then be assigned to a specific account type in KYDSO.
The following Active Directory account types are available in KYDSO for the transfer of existing accounts:
Internal Account | Active Directory account that belongs to an internal employee |
External Account | Active Directory account that belongs to an external employee |
Privileged account | Active Directory account for special access rights |
Technical Account | Active Directory account for a service access or similar. |
KYDSO supports you with the assignment:
For each newly created Unmanaged Account, the system checks whether there is at least one internal employee to whom the account matches.
If yes, an assignment proposal is generated for each hit.
One of the following work orders is then generated for each Unmanaged Account, which you can use to complete the assignment:
Work order Confirm account assignment for the Unmanaged Account for which at least one assignment proposal has been generated.
Work order Assign account type for all other Unmanaged Accounts.
Open the Work orders, select the Unmanaged Accounts profile if necessary and assign the Unmanaged Account to a specific account type.
As soon as the account type has been changed, the imported account is managed in KYDSO.