Directory Sync Operational Flow

This software synchronizes users and groups with the IIJ ID Service via the following sequence.

  1. Directory Sync is started by the Windows Task Scheduler.
  2. Active Directory synchronization objects (users and groups) are retrieved via LDAP (S) communication.
  3. Information on users and groups is retrieved from the SCIM server for the IIJ ID Service, and then cache information is generated (if there is no existing cache).
  4. A request for the differential data based on the comparison between the retrieved Active Directory information and the cache information is generated.
    * If normal_mode_dry_run.bat is used, it ends in the processing of step 4.
  5. The differential data request is sent to the SCIM server for the IIJ ID Service.
  6. Job History is created by the IIJ ID Service.
  7. Directory Sync’s cache information is updated in accordance with the result of the differential data request.