ADSync

Administrators can use the ADSync Configuration to automatically synchronize Active Directory domain groups and OUs to roles within ImageQuest. The configuration is found in the Manage Warehouse section of the IQAdministrator application.

NOTE: The user that is logged into IQAdministrator MUST have the permissions to read the Active Directory Schema.

From the ADSync Configuration menu, select Add Link to bring up the Link Editor.

The Link Editor shows the Active Directory Objects and the IQ roles from both systems. Select an Active Directory Group or Organization Unit to link to a role within ImageQuest. In the example above, the “IQ ADSync” Active Directory Group is selected in the Active Directory Objects. The IQ role “Standard Users” will be linked to the “IQ ADSync” Active Directory Group. Click the Link button to create the link.

(NOTE: One to many links can be created from a single AD Group to multiple IQ roles)

If “Enable email notifications if addresses are available” is checked, this will populate the user’s email address from Active Directory with the email address ImageQuest uses for notifications.
Selecting “Remove users from IQ role if they no longer exist in the linked AD object” will remove users from the linked role in ImageQuest if they are removed from the group within Active Directory. It does not delete the user from ImageQuest.

(NOTE: If you sync an ImageQuest role to an Active Directory group, you will not be able to add none ADSync users to that role when using the remove option. They will be removed on the next sync.)

If you have previously used the separate ADSync utility from an older version of IQ, your configuration can be imported using the “Import Config” button. After clicking “Import Config”, browse to the links.xml file in the old ADSync program folder and click the “Open” button. All of the previous links will be imported into IQadministrator.

Once the configurations have been set, you can specify in hour(s) the amount of time between synchronizations. This time frame can be set to a decimal to sync faster than 1 hour if desired.
(For example: 0.25 hours equals every 15 minutes)

Once the Sync Interval has been set, use the Update Interval button to save the interval time.
Use the “Delete Link” button if the mapping is no longer needed. The “Edit Link” button will bring up the Link Editor window to make any changes to the mapping.