Trigger on-demand synchronization

For on-premises directory, the Crawl Frequency setting defines how often (in milliseconds) the directory information on your Identity as a Service account is updated to match the information in the corporate directory it is synchronized with. The crawl frequency is set to 1 hour by default. For Microsoft Entra ID, automatic synchronization occurs every 8 hours. You cannot change this value.

Note: For on-premises directories, to disable automatic crawling set the crawl setting to 0 (see Configure an on-premise Active Directory). When disabled, on demand synchronization is not available.

The On-Demand Sync tool allows you to trigger a synchronization every 10 seconds or more. This feature is useful when you have made changes to your corporate directory information and do not want to wait to update the information in your Identity as a Service account.

For on-premises directory, you can initiate a synchronization while one is in progress. With Microsoft Entra ID you must wait for the synchronization to complete before initiating a new synchronization. Check the Sync Status on the Directories List page before initiating an Microsoft Entra ID on-demand synchronization.

Synchronization of users from Microsoft Entra ID supports synchronizing the Security ID value into IDaaS. The Security ID uniquely identifies users in a Microsoft Windows environment.

Trigger on-demand synchronization

1.      Click > Resources > Directories. The Directories List page appears.

2.      Click to the right of the directory you want to synchronize.

3.      The update takes approximately 10 seconds to complete.

4.      Optional. Click to view the Directory Sync Details.

●       For Microsoft Entra ID, the Directory Sync Details provides a list of Most Recent Errors (to a maximum of 20 errors) and the Sync Results.

●       For on-premises directories, the Directory Sync Details provides a list of Most Recent Errors (to a maximum of 20 errors) the Directory Scan Results.

5.      Click to see more information on Most Recent Errors.

6.      Click to see more information on the Directory Scan (on-premise directory) or Sync Details (Microsoft Entra ID). The following synchronization metrics for Users and Groups appear:

●       New: New user or groups that were added during crawling

●       Changed: Users and groups that have changes since the last crawl

●       Desynced: Users and groups that are no longer present in the directory and have been removed

●       Failed: Number of unexpected errors while crawling users and groups

●       Unchanged: Users and groups that have not changed since the last crawl  

Note: Metrics only reflect the statistics during the crawl phase.

7.      Click to see the Upload Results. The Upload Results shows the metrics for new, changed, desynced and failed results of the synchronization for Users and Groups of on-premises directories only.

Note: This metric is not available for Microsoft Entra ID directories.

8.      Click OK to close the Directory Sync Details.