Delta Sync
This article describes the Delta Sync feature, which allows eADM to manage access rights in near real-time. In practice, this means that if a manager grants an employee access to a target system, the access is provisioned almost immediately.
Overview
The feature uses two types of synchronization cycles to keep data up-to-date:
Delta Sync (Incremental Sync): This is a continuous "mini-sync" that processes only the changes made within eADM since the last cycle and exports them to your target systems. This sync does not import data from external sources like an HR system.
Full Sync: At scheduled intervals, a full synchronization cycle runs. This process performs all tasks, including importing new and updated data from the primary source system (e.g., HR and payroll) before synchronizing the changes to all connected systems.
Configuration Example
The synchronization process is managed through a series of configurable tasks. The image below shows an example of a full synchronization cycle and the safety thresholds for data import.
Import Filter These settings are safety thresholds that can prevent unintended changes by stopping a synchronization if the number of incoming changes exceeds a defined percentage.
New (Nye): Threshold for new user accounts.
Changed (Endrede): Threshold for modified user accounts.
Deleted (Slettede): Threshold for deleted user accounts.
User Data Anomaly (AvP): Threshold for handling significant deviations in user data.
Synchronization Cycle This list represents the tasks performed during a Full Sync. A Delta Sync runs the synchronization and export tasks but skips the initial import steps (e.g.,
Import HR).Import HRImportHrFutureImport HierarchyImport ADSynchronizationExport ADImport AD ResultsExportP360Export Azure
Implementation
Enabling the Delta Sync feature requires adjustments to your existing eADM configuration.
Note: The setup requires an estimated 3-4 hours of consulting work per eADM instance. Please contact Identum Support to get started.