Reconciliation of Active Directory group memberships
KYDSO performs a daily reconciliation of the AD group memberships from the customer system's Active Directory.
For this purpose, the existing AD group memberships are compared with the group memberships available in KYDSO. If a group membership does not yet exist in KYDSO, it is created in KYDSO.
The reconciliation is performed with the following settings:
Only internal and external accounts are included in the reconciliation.
Only memberships of groups that are managed in KYDSO are created: Confirm group management
A membership is only created if the account is already managed in KYDSO.
The deletion of a group membership in the Active Directory is not transferred to KYDSO.
You can display the memberships that currently exist in KYDSO for an AD group: Displaying the members of an AD group
Display the status of the AD group member reconciliation
You can display the status for each reconciliation in the orders.
Click on the action in the View data menu.
This opens the order search, which is empty the first time KYDSO is started for performance reasons.
Search for the article Group member reconciliation. Narrow the search further as required, e.g. with an order date.
By default, only orders that are still being processed are displayed in the results list. Activate the Show inactive order items, too checkbox if you also want to see completed orders.
The current status of each order is displayed in the results list.
Click on for more information on the desired order.
If the reconciliation has run into an error, you will find an indication of the cause here.