Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

AD Full User Import takes same time as AD Incremental User Import

yogesh2
Regular Contributor II
Regular Contributor II

We have observed that full user import takes same time as incremental user import.

Is there some specific configuration that we need to have on AD connector to make the incremental import work correctly? Because right now it seems to be doing same exact stuff as the full import.

Below are the job logs and both are taking half an hour.

yogesh2_0-1723188120685.png

yogesh2_1-1723188132149.png

 

4 REPLIES 4

Dhruv_S
Saviynt Employee
Saviynt Employee

Hi Yogesh,

Please refer to the documentation for the configurations for incremental and full import job and connection.

Active Directory Integration Overview (saviyntcloud.com)

Regards,

Dhruv Sharma

yogesh2
Regular Contributor II
Regular Contributor II

I have already gone through the documentation and there is no mention of what exact configurations are required for incremental import to work properly.

I have tried mapping ADs whenChanged attribute to users UPDATEDATE column but that doesn't help either:

UPDATEDATE::whenChanged#customDate--yyyyMMddHHmmss.'0Z',

 as well as 

UPDATEDATE::whenChanged#date,

stalluri
Valued Contributor II
Valued Contributor II

@yogesh2 

Can you share the user import Json here along with the job screenshot here.


Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.

yogesh2
Regular Contributor II
Regular Contributor II

for incremental import to work properly you have to map both user attributes (why is this not documented in the connector page?):

UPDATEDATE::whenChanged#customDate--yyyyMMddHHmmss.'0Z',
CREATEDATE::whenCreated#customDate--yyyyMMddHHmmss.'0Z',

but this is undesired in our case as we have multiple sources for the user import and each will try to update these fields and will cause lots of updates in user update history.

In my opinion this should not be a requirement, saviynt should apply these filters to get the users from target system, why are we required to write these values to user profile?

I have created an Idea for this:
https://ideas.saviynt.com/ideas/EIC-I-6143