AUTOMATE ADSYNC is an agent that synchronizes different forests and/or clouds. ADSYNC consists of two agents that are installed on the client's Active Directory infrastructure to synchronize Users, Passwords, Groups, and Contacts.
To synchronize passwords, it is necessary to enable ADSYNC in Organization in the Control Panel and then install and configure the agent on all Client Domain Controllers. After installation it will be needed to restart the server.
How does Password Synchronization work?
Every time a password is changed, our agent intercepts the password exchange, encrypts it and stores it locally in a buffer. These stored passwords are sent to the Control Panel at each time period (configurable in Windows scheduled tasks).
To synchronize objects (users, groups, and contacts) it is necessary to enable ADSYNC in the Organization in the Control Panel and then install and configure the agent on a Client Domain Controller.
How does Object Synchronization work?
Every time the agent is invoked it performs the searches in the AD according to the configuration made and sends the results to the Control Panel. The Control Panel decides whether the object should be created or updated. The timing of these synchronizations is configurable via scheduled Windows tasks.
All synchronization is done over the internet in HTTPS ensuring the security of the data of the Customer.
Account Creation and Synchronization
ADSYNC is commonly used to create customer accounts in Control Panel. In this way, just create the Customer on the Panel and then trigger the agent, because it will create the accounts and activate the resources according to the desired settings.
ADSYNC is commonly used only for synchronizing passwords, in other words all account creation is done via Panel, but to avoid managing two passwords (local AD and Cloud) ADSYNC is installed.