How to Override User and Group Loading

Overview

You can override user and group loading during the security synchronization job for some connections, such as:

  • SQL Server
  • WebService
In other words, if the source system manages its own users and groups instead, the connector offers you scripting capabilities to help you map your source system users and groups to the target directory.

Override Mapping Logic Procedure

Alternatively, override the mapping logic using these steps:

  1. Navigate to the Connections page.
    1. For your webservice or database connection, click Actions > Edit.
  2. Click the Security Scripts tab.
    • User load script:
      • Enter a VB.Net script to alter the users that are loaded.
      • This code does not return a value.
    • Group load script:
      • Enter a VB.Net script to alter the groups that are loaded.
      • This code does not return a value.
  3. Compile: Click to validate and use your scripts.

Override Example

The following example uses email addresses to map users.

It works only if the connector returns the email addresses for users and the target directory supports retrieving users by email address.

Example 
Return TargetDirectory.GetUserByEmailAddress("EmailAddress"))

For a list of available user and group loading functions and description of them, see Security Scripts and Functions.

You cannot reject/skip users or groups using scripting.