Synchronization Overview

Synchronization is the core function of IdentityCenter. It imports identity data from your connected sources, processes it through configurable workflows, and maintains a unified view of all identities in your organization.

What is Synchronization?

Synchronization in IdentityCenter:

1. Queries external directory sources for objects (users, groups, computers)
2. Transforms the data through configurable attribute mappings
3. Matches objects to existing identities or creates new ones
4. Updates the IdentityCenter database with current information
5. Tracks changes over time for audit and compliance

Key Concepts

Sync Projects

A sync project is a reusable configuration that defines:

• Which connection to use
• What objects to synchronize
• How to process the data
• When to run (schedule)

Workflows

Workflows are the processing pipeline for synchronized data. Each workflow consists of steps that:

• Query the source
• Filter and transform data
• Match to identities
• Commit changes

Identity Objects

When you synchronize an object (like a user from AD), it becomes an Identity Object in IdentityCenter. Multiple identity objects from different sources can be linked to a single Identity (person).

Identity: John Smith
├── Identity Object: AD account (jsmith@corp.local)
├── Identity Object: Entra ID account (john.smith@corp.com)
└── Identity Object: HR System (EMP001)

Attribute Mapping

Attribute mapping defines how source attributes become IdentityCenter fields:

Sync Architecture

┌─────────────────────────────────────────────────────────────┐
│                      Sync Engine                             │
├─────────────────────────────────────────────────────────────┤
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐         │
│  │  Scheduler  │  │  Executor   │  │  Monitor    │         │
│  └─────────────┘  └─────────────┘  └─────────────┘         │
├─────────────────────────────────────────────────────────────┤
│                    Workflow Engine                           │
│  ┌──────┐  ┌──────┐  ┌──────┐  ┌──────┐  ┌──────┐         │
│  │Query │→ │Filter│→ │Map   │→ │Match │→ │Commit│         │
│  └──────┘  └──────┘  └──────┘  └──────┘  └──────┘         │
├─────────────────────────────────────────────────────────────┤
│                    Data Layer                                │
│  ┌─────────────────────────────────────────────────────┐   │
│  │  Identities  │  Identity Objects  │  Sync History   │   │
│  └─────────────────────────────────────────────────────┘   │
└─────────────────────────────────────────────────────────────┘

Sync Modes

Full Sync

Queries all objects from the source and reconciles with IdentityCenter.

Delta Sync

Queries only objects changed since the last sync.

Preview Sync

Shows what would change without making actual modifications.

Sync Scheduling

Schedule Types

Recommended Schedules

Sync Results

After each sync run, you'll see:

Best Practices

Start Small

Begin with a limited scope (one OU, specific filter) before expanding.

Use Preview Mode

Always run a preview sync before production changes.

Monitor Performance

Track sync duration over time to identify degradation.

Handle Errors

Review and address sync errors promptly.

Document Mappings

Keep documentation of your attribute mappings current.

Schedule Wisely

Avoid running syncs during business hours if possible.

Common Sync Patterns

User Lifecycle Sync

Import new users, update existing, detect departures.

Group Membership Sync

Keep group memberships current across all sources.

Organizational Hierarchy Sync

Maintain manager relationships and department structure.

Multi-Source Correlation

Match the same person across AD, Entra ID, and HR systems.

Next Steps

• Creating a Sync Project
• Attribute Mapping
• Scheduling Syncs
• Workflow Configuration