Active directory synchronization

[MayurSadhu1089]

Hi

Suppose I have one active directory sync with call manager. I have done all initial synchronization and imported 1000 users in CUCM.

Now I have 2 new joiners in my organization. So if i create those users first in CUCM , will those users get sync with active directory after specified time ?  or I have to first add those users in AD first and then only its will get visible in CUCM ?

Please guide on this.

Thanks.

[Maren Mahoney · Accepted solution]

You do not need to add the users in CUCM first. They will sync on the next Directory Synchronization.

If you do want to build them first in CUCM for administrative purposes, if the userID and Last Name matches in both systems then CUCM will map the newly-synched AD users over onto the manually-configured CUCM user. You'll be left with one account in CUCM.

Maren

[MayurSadhu1089]

So, if userID and last name get matched in AD and CUCM(manually created end user ) then it will get sync and will be having only one user in CUCM.  If it does not get match then there will be only local user in CUCM right ?

[Roger Kallberg · Accepted solution]

If the name doesn’t match between AD and the local users in CM you’ll get two users. One that came from AD by the synchronisation and one that you created.

By the sound of your question it seems like you possibly might think that users are synchronised from CM to AD. This is not so, the synchronisation is one way, from AD to CM.

[MayurSadhu1089]

Hi Roger

Yes, I was bit confused about user synchronization whether its from AD to CM or CM to AD.

But thanks for clarifying my doubt.   It will be always AD to CM.

Thanks 

[Adam Pawlowski · Accepted solution]

One further caveat - if you've configured the system for single-sign on, you will not be able to have your local user accounts authenticate to the self-care portal, admin portal, etc. Interfaces that don't support basic auth or LDAP bind won't work.