ADCONNECT仅用于同步用户名和密码 [英] ADCONNECT sync username and password only

问题描述

Hi,

我使用ADCONNECT将用户从我的内部部署Active Directory同步到Azure AD。

I use ADCONNECT to sync the users from my on premise Active Directory to Azure AD.

是否可以只同步用户名和密码，而不是所有其他属性？

Is it possible to only sync the username and password, not all the other attributes?

如果我现在同步用户，我不能更改Azure Active目录中的"灰显"字段，例如

If i sync the user now , i cannot change the 'grayed out' fields in Azure Active directory, like

- 职务名称

- 办公室电话

etc ....

推荐答案

如果您不希望这些属性同步，则可能必须对出站连接器同步规则进行大量更改。 Azure AD中许多属性变灰的主要原因是，许多属性应仅在内部部署时进行功能修改
。例如，让我们取属性"employeeID"或"职称"或。这些属于任何公司破坏混合身份基础设施的HR系统应具有权威性的属性，因为这些属性变化
必须始终通过任何企业的HR功能发起。类似地，大多数属性具有在天蓝色AD中变灰的一个或另一个类似的原因，并且仅可以从内部部署进行编辑。在任何情况下，在混合环境中，我们总是建议从一个系统进行更改，这最好是内部而不是天蓝色AD。因为这样你可以改变大部分事情。如果您拥有适当的许可证并且启用了密码写回，则可以在云中更改密码。

You may have to make a lot of changes to the outbound connector sync rules if you do not want these attributes to sync. the main reason for many attributes being greyed out in Azure AD is because a lot of those attributes should be functionally modified only on on-premise. for example lets take the attribute "employeeID" or "Job title" . These are attributes for which the HR system in any company ruining Hybrid identity infrastructure should be authoritative as these attributes changes must always originate through HR function of any business . Similarly most of the attributes have one or the other similar reason for being greyed out in azure AD and only editing being possible from on-premise. In any case, in a hybrid environment we always recommend making changes from one system and that is preferably on-premise rather than azure AD . Because that way you can change most of the things. Passwords can be changed in the cloud if you have proper licenses and have password writeback enabled.

希望信息有所帮助。 

Hope the information helps. 

这篇关于ADCONNECT仅用于同步用户名和密码的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！