Automatically link Managed Directory Accounts

Hi Walied, 

Pre-requisites:

- Create a new directory group in AD for example SafeguardUsers and add only the users you wish to import as SPP Users to be members of that group for example "hatem ali" as member of SafeguardUsers 

- Add the expected managed account to the AD asset in SPP > Go to the AD asset and select accounts tab then add for example "hatem pam" (this can be automated via Account Discovery or manually add the account for testing purpose first)

After the above is completed:

- Go to User groups section in SPP and add the SafeguardUsers to SPP via Add Directory User group and enable Automatically Link Managed Directory Accounts checkbox

- This will import the user "hatem ali" who is a member of SafeguardUsers for example and then when directory sync runs, it will link the existing managed account "hatem pam" as a linked account to the SPP user "hatem ali"

The linked account does not automatically get created in SPP as a managed account via the Directory Sync process as that is a separate process and so the managed account needs to exist in SPP or added (either manually or via Account Discover from AD) then the above steps would allow the managed account to be linked automatically to the User (1:1 relationship in this use-case) based on the directReports attribute.

I would avoid using groups that have both users and accounts in terms of SPP objects as that will cause the undesired result where an account is added as a user which is likely not required in this use-case.

Thanks!

Hello Tawfiq,

Thank you for replying. I have tried what you said, and it works well. However, when I tried reversing the order the process (i.e. I imported the users by syncing from AD before the importing the accounts into Safeguard through an account discovery job) it didn't work. So, is it necessary that accounts are imported into Safeguard before users? 

It will work either way (Users added first or Accounts added first) but the accounts must be added in order for the linked accounts to update correctly.

Thanks!

Hello Tawfiq, I have tried the process and found it working, but I can't see what triggers it.

I have done a directory sync from the web client and a full sync from the API and neither of them triggered the account linking. Nevertheless, when I restarted the appliance and look at the logs, I find the relationship between the Safeguard user and the account added right after the restart.

Do you have any clue on this?

Hello Tawfiq, I have tried the process and found it working, but I can't see what triggers it.

I have done a directory sync from the web client and a full sync from the API and neither of them triggered the account linking. Nevertheless, when I restarted the appliance and look at the logs, I find the relationship between the Safeguard user and the account added right after the restart.

Do you have any clue on this?

Hi Walied,

I would suggest to upgrade to 7.4.1 and see if you can reproduce the issue or if this gets resolved as we have included several fixes since 7.1.1

Thanks!