Configure User Directory Synchronization in Idira

1. Log in to your Idira Admin Portal.

   You can find your login URL in the invitation email sent by Idira. Alternatively, in the Strata Cloud Manager console, click Connect Directories via IDIRA on the banner under AI SecurityAgent IdentityAgent Identities.

2. In the Idira console, click Setup.

3. Go to DeploymentIdentity SourcesExternal Identity Providers and select the identity provider you want to configure.

   To create a new external identity provider, see Federate with an external IDP in the CyberArk documentation.

4. Click the Authentication tab and set the following options:

   Field	Recommended Value
   Map federated user to existing directory user	Required
   Federated user attribute to be mapped	UserPrincipalName
   Mapped Directory service	Idira Cloud Directory
   Directory user attribute to be mapped	Name
   Update cloud users with federated user attributes	Selected
   Update federated users with attributes from external IdP	Selected
   Add mapped users to federated groups	Selected
   Allow mapping to users in other federations	Not selected (typical)

5. Click Save.

   For more information, see Provision users to the Idira Cloud Directory with SCIM in the CyberArk documentation.