Usage Precautions

Read and understand the following section before using this software.

IIJ ID User Passwords

Email notifications of account registration are not sent to IIJ ID users that are created by this software. Therefore, a temporary password needs to be issued for IIJ ID users who are not also using Password Sync. A temporary password is issued after a user enters their login ID on the IIJ ID Service login page. An issued temporary password is sent to the user's notification email address.

Recreating OpenLDAP Accounts for Provisioned user to Microsoft 365

The process to link an ID to Microsoft 365 may sometimes fail when OpenLDAP accounts are recreated in environments where IDs of synchronized IIJ ID Service users are linked to Microsoft 365.

User’s application-linking ID or external IDAccount on Microsoft 365ID linkage to Microsoft 365Comments
Same as before the recreation processExists but in the blocked state*SucceedsThe account is unblocked, which makes the existing Microsoft 365 account available again.
Does not existSucceedsCreated as a new account
Different from before the recreation processExists but in the blocked state*Fails

Because the creation process would result in a duplicate of the blocked Microsoft 365 account, the creation process fails.

Delete the existing Microsoft 365 account permanently.

Does not existSucceedsCreated as a new account

* When IIJ ID users are disabled or set as pending deletion by Directory Sync, the Microsoft 365 account is blocked and the license is deactivated.

Expiration date of an access token

If the access token set to Directory Sync has expired, synchronization with the IIJ ID Service will be failed.

Refer to "Updating Access Tokens" in the IIJ ID Service Online Manual [For Administrators] for how to check the expiration date of an access token and how to update access tokens.

Use of Older Version of Software

IIJ will not be liable for any issues related to old versions of this software 6 months after an update of this software is released.