Synchronize Cloud Identity Engine Tenants
Learn how to synchronize changes to your directory attributes
in your Cloud Identity Engine tenants.
There are two ways that the Cloud Identity
Engine synchronizes changes to your directory attributes:
- A full sync, which is a complete sync of the entire directory.
- A sync of just the changes to the directory since the last successful sync, which takes much less time to complete (Not supported with Google Directory).
By default, the Cloud Identity
Engine app synchronizes the directory attributes:
- Every five minutes with the changes since the last successful sync (Not supported with Google Directory).
- Weekly with a complete sync of all configured directories (Not supported with Google Directory).
- Based on the schedule you select (Google Directory only).
To
refresh your Cloud Identity Engine tenant with any recent changes
in your directory before that time, you can select how you want
to synchronize changes to the attributes for your configured domains.
Synchronize All Attributes
Synchronizing all attributes (a full sync) is
recommended if you are experiencing issues or lose connectivity.
For
on-premises directories, all agents and domains for the tenant must
be active for the sync to complete successfully.
- Log in to the hub and select theCloud Identity Engineapp.
- Select the directory you want to synchronize, then selectDirectories.
- Select to initialize the synchronization for the directory type you want to synchronize instantly.
For an on-premises Active Directory, click .
The synchronization starts immediately and a confirmation message (Sync started) displays. The sync may take some time to complete, so make sure you clickFull Synconly once. If a synchronization is currently in progress when you try to synchronize, a warning message (Sync in progress) displays at the top of the screen. - To confirm the synchronization is complete, verify theSync StatusisSuccess.
Synchronize Directory Changes
You can sync just the changes to your directory,
which is much faster than a full sync of your directory. By default,
the Cloud Identity Engine syncs changes every five minutes.
- If you have not already done so, configure a directory.
- After making changes to your directory, select to sync the changes for your directory.
For an on-premises Active Directory, clickSync Changes.
The sync may take some time to complete, so make sure you clickSync Changesonly once. We recommend a full sync of your directory if you lose connectivity or are experiencing issues. To sync the entire directory, Synchronize All Attributes in a full sync. If a full sync is in progress, you cannot sync changes. After a full sync completes in the Cloud Identity Engine app, the firewall must also complete a full sync.
Set Synchronization Interval
This sync option is available for Google
Directory only.
- Log in to the hub and select theCloud Identity Engineapp.
- Select the tenant you want to synchronize, then selectDirectories.
- ClickSync Every:for the directory type interval that you want to change and select the interval.
- 6 Hours
- 12 Hours
- 24 Hours(Default)
After you select an interval, a confirmation message displays at the top of the screen.
Synchronize Attributes Instantly
This sync option is available for Google
Directory only.
- Log in to the hub and select theCloud Identity Engineapp.
- Select the tenant you want to synchronize, then selectDirectories.
- Sync Nowto initialize the synchronization for the directory type you want to synchronize instantly.The synchronization starts immediately and a confirmation message (Sync started) displays. If a synchronization is currently in progress when you try to synchronize, a warning message (Sync in progress) displays at the top of the screen.
- To confirm the synchronization is complete, verify theSync StatusisSuccess.
