HP Identity Driven Manager Software Series User Manual
Page 65
2-45
Getting Started
User Session Information
5.
To Add a group to the "Groups to Synchronize" list, click
Add or Remove
Groups... to display the Add or Remove Groups dialog.
Figure 2-35. Active Directory Synchronization: Add or Remove Groups
The Active Directory is queried for all groups in the domain and the groups
are displayed in the "Groups in Active Directory" list.
N O T E :
When adding or removing groups remember that synchronization
includes all users who are indirect members of a group via intervening
nested group relationships. In addition, users belonging to more than one
AD group are added to the IDM group with the higher priority. For
example, User 1 in the following example is imported into Group ALL if
IDM synchronizes on Group ALL. Or, if IDM synchronizes on Group A or
Group B, User 1 is imported into the group with the higher priority. If IDM
synchronizes on Group d or Group y, the User 1 is not imported.