beautypg.com

HP Identity Driven Manager Software Series User Manual

Page 65

background image

2-45

Getting Started

User Session Information

5.

To Add a group to the "Groups to Synchronize" list, click

Add or Remove

Groups... to display the Add or Remove Groups dialog.

Figure 2-35. Active Directory Synchronization: Add or Remove Groups

The Active Directory is queried for all groups in the domain and the groups
are displayed in the "Groups in Active Directory" list.

N O T E :

When adding or removing groups remember that synchronization
includes all users who are indirect members of a group via intervening
nested group relationships. In addition, users belonging to more than one
AD group are added to the IDM group with the higher priority. For
example, User 1 in the following example is imported into Group ALL if
IDM synchronizes on Group ALL. Or, if IDM synchronizes on Group A or
Group B, User 1 is imported into the group with the higher priority. If IDM
synchronizes on Group d or Group y, the User 1 is not imported.

This manual is related to the following products: