Quick Start Guide
Get IdentityCenter up and running with your first synchronization in under 30 minutes.
What You'll Accomplish
By the end of this guide, you will have:
- Created a connection to your Active Directory
- Set up a sync project to import users
- Run your first synchronization
- Viewed your imported identities
Prerequisites
Before starting, ensure you have:
- IdentityCenter installed and running (see Installation Guide)
- Network access to at least one Active Directory domain controller
- A service account with read permissions to AD
Step 1: Log In to IdentityCenter
- Open your browser and navigate to your IdentityCenter URL
- Log in with your administrator credentials
- You'll see the main dashboard
Step 2: Create Your First Connection
A connection defines how IdentityCenter communicates with a directory source.
- Navigate to Administration > Connections
- Click New Connection
- Fill in the connection details:
| Field | Example Value | Description |
|---|---|---|
| Name | Corporate AD | Friendly name for this connection |
| Type | Active Directory | The directory type |
| Server | dc01.corp.local | Domain controller hostname or IP |
| Port | 389 | LDAP port (389 or 636 for LDAPS) |
| Use SSL | No | Enable for LDAPS on port 636 |
| Username | svc_identitycenter@corp.local | Service account UPN |
| Password | ******** | Service account password |
| Base DN | DC=corp,DC=local | Root of your AD tree |
- Click Test Connection to verify connectivity
- Click Save to create the connection
Tip: Start with a non-SSL connection on port 389 for initial testing. You can enable LDAPS later for production.
Step 3: Create a Sync Project
A sync project defines what objects to synchronize and how to process them.
- Navigate to Synchronization > Projects
- Click New Sync Project
- Configure the project:
| Field | Value |
|---|---|
| Name | User Sync |
| Connection | Corporate AD |
| Object Type | Users |
| Scope | All Users |
- Click Save
Step 4: Configure the Sync Workflow
The workflow defines the processing steps for synchronized objects.
- On your sync project, click Edit Workflow
- Add the following steps:
Step 1: Import from AD
- Type: Source Query
- LDAP Filter:
(&(objectClass=user)(objectCategory=person)) - Attributes:
sAMAccountName, displayName, mail, department, title, manager
Step 2: Match to Identities
- Type: Identity Matching
- Match by: Email address, then Employee ID
Step 3: Create/Update Objects
- Type: Commit Changes
- Action: Create new, Update existing
- Click Save Workflow
Step 5: Run Your First Sync
- Navigate back to Synchronization > Projects
- Find your "User Sync" project
- Click Run Now
- Watch the progress in real-time:
- Objects queried from source
- Objects matched to identities
- New identities created
- Existing objects updated
Step 6: View Your Identities
- Navigate to Identities > All Identities
- You'll see a list of all synchronized users
- Click on any identity to view:
- Basic information (name, email, department)
- All linked identity objects from connected sources
- Group memberships
- Access history
What's Next?
Now that you have your first sync running, explore these features:
Expand Your Sync
Add More Connections
Set Up Access Reviews
Configure Policies
Troubleshooting Quick Start Issues
Connection Test Fails
Symptom: "Unable to connect to server"
Solutions:
- Verify the domain controller is reachable:
ping dc01.corp.local - Check firewall rules allow LDAP traffic (port 389 or 636)
- Verify the service account credentials
- Try using the IP address instead of hostname
No Users Imported
Symptom: Sync completes but shows 0 objects
Solutions:
- Verify the Base DN is correct
- Check the LDAP filter syntax
- Ensure the service account has read permissions
- Try a broader filter:
(objectClass=user)
Sync Takes Too Long
Symptom: Sync runs for hours
Solutions:
- Narrow your LDAP filter to target specific OUs
- Reduce the attributes being synchronized
- Check the Performance Tuning Guide
Summary
You've successfully:
- Connected IdentityCenter to Active Directory
- Created and configured a sync project
- Run your first synchronization
- Viewed imported identity data
This is just the beginning. IdentityCenter's power comes from connecting multiple sources, creating a unified identity view, and automating access governance.