PingDirectory

Perform an initial bulk synchronization with the resync command

You can use the resync command to perform an initial synchronization from the source to the destination. It iterates through all entries in the source server and compares them with their counterparts in the destination server.

Any source entries that are not found in the destination are created. For entries that exist in both the source and the destination, any differences identified between them will cause the destination entry to be updated to match the source.

You can run the resync --help command to see the complete usage information for the tool, but in many cases, you only need to specify the name of the sync pipe. For example:

resync --pipe-name "LDAP Source to SCIM 2.0 Destination"

Because the System for Cross-domain Identity Management (SCIM) 2.0 sync destination uses its own attribute mapping in addition to the mapping performed by the sync class, there might be cases in which the resync command believes the source and destination versions of an entry to be out of sync when they are actually in sync. This is especially true if the sync class is configured with an auto-mapped-source-attribute value of -all-.

This can cause the resync command to report that a lot more entries are being modified than actually are being updated because the SCIM 2.0 sync destination performs its own comparison of the source and destination entries and might not attempt any update if it already sees that they are equivalent.

This doesn’t have any adverse effects, but you can update the auto-mapped-source-attribute property to explicitly list only the names of the source attributes that might be used to create the SCIM 2.0 representation of the entry.