Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working with External Directories > Planning for your first synchronization > Deciding what to synchronize
Deciding what to synchronize
Related topics:
*
What is SCIM?
*
How the service works with SCIM
*
What is LDAP?
*
How the service works with LDAP
*
Basic steps
*
Cloud portal tasks
*
Client tasks (Directory Synchronization only)
*
Set up authentication (Directory Synchronization only)
You do not need to provision all of the groups and users in your directory. Instead, provision only groups that are useful to the cloud service.
Consider this example:
If you are going to set up a policy for members of a US Telesales department that gives them special permission to access certain websites, you should provision the "US Telesales" group. There is no need to provision the "London" group if you are not going to set up geographical policies in the cloud service, even if the London users are going to be using the service.
Sometimes when users are provisioned to the cloud service, they are members of multiple groups, but only a subset of those groups is provisioned. This is not a problem: the cloud service is designed to accept users with group references that are not on the service.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working with External Directories > Planning for your first synchronization > Deciding what to synchronize
Copyright 2023 Forcepoint. All rights reserved.