Manage existing connections

Once you’ve added identity server directory connections, you can view and manage them from the Identity provider page.

View connections

From the search bar, you can search for a particular connection by its connection name.

From the ACTIONS drop-down, you can perform the following actions on selected connections.

• Sync connection — Manually syncs the connection with Knox Manage.
• Edit server connection — Edit the details of the server connection, such as when it’s scheduled to sync.
• Edit user or group connection — Edit the sync targets.
• Delete connection(s) — Deletes the connection from Knox Manage.
• Manage sync conflicts — Occurs when a target can’t sync from your identity server directory to Knox Manage. See manage sync conflicts to learn more.

View details

To view the details of a connection:

1. Go to the Identity provider page.
2. Click the name of the connection you want to view.
3. The sliding panel opens.

At the top of the sliding panel, the connection’s status is displayed. The rest of the sliding panel is split into the following sections:

• SERVER
• USER CONNECTION
• GROUP CONNECTION

Read the sections below to learn more about the information included in each category.

Server

The SUMMARY section provides an overview of the connection’s standing in your Knox Manage tenant.

• Connection type — The identity server directory associated with the connection.
• IP/Host — The IP or Host address.
• Encryption type — The encryption type used to communicate with the AD server.
• Auth type — The authentication type used to establish a connection with the AD server.
• User ID — The administrator information of the identity server directory.
• User sync target — The users targeted for sync with this connection. Click on the number to view a list of all users synced for this connection.
• Group sync target — Groups targeted for sync with this connection. Click on the number to view a list of all groups synced for this connection.
• Automatic syncs — Displays how frequently connections are synced if automatic scheduling is enabled.
• Last synced — The date and time when the connection was last synced, either manually or by automatic schedule.
• Last updated — The date and time when the connection was last updated, either by scheduled sync or IT admin modification.

User connection

The USER CONNECTION section provides an overview of how users are connected from the identity server directory to Knox Manage.

• Base DN starting point — The Base DN starting point where your AD server searches for users.
• Filter — The filter string set to specify LDAP data items.
• Sync target — The method used to select users for syncing, either Select individually or All users.
• Additional settings — Displays any additional settings that were configured for the connection.
• Mapping information — Displays any mapping information configured for the connection.

Group connection

The GROUP CONNECTION section provides an overview of how groups are connected from the identity server directory to Knox Manage.

• Base DN starting point — The Base DN starting point where your AD server searches for groups.
• Filter — The filter string set to specify LDAP data items.
• Sync target — The method used to select groups for syncing, either Select individually or All groups.
• Additional settings — Displays any additional settings that were configured for the connection.
• Mapping information — Displays any mapping information configured for the connection.

At the bottom of the details sliding panel, you can click EDIT SYNC TARGETS to edit the connection. Additionally, click the icon to perform the following actions on the connection: Sync connection, Edit server connection, Verify connection, and Delete connection.

Manage sync conflicts

Sync conflicts occur when a target can’t sync from your identity server directory to Knox Manage. Sync conflicts can occur for a variety of reasons.

There are four types of sync conflicts:

• Deleted from Knox Manage — The synced user or group was deleted in Knox Manage.
• Deleted from directory — Targets are deleted from the identity server directory and, therefore, also deleted from Knox Manage.
• Deleted from directory group — The user in a synced group in Knox Manage is deleted because they’ve been excluded from the identity server directory’s group.
• Sync disabled — The sync status of the target has been set to Sync disabled.

To fix sync conflicts, you can delete impacted targets from the list of sync conflicts. Deleted targets are automatically re-added to the list of sync targets for the relevant connection if you resolved the reason for the sync conflict. They re-sync when you manually sync them, or when automatic sync is next scheduled.

To delete a sync conflict:

1. Go to Connection and security > Identity provider.
2. Click ACTIONS > Manage sync conflicts.
3. Select the targets that you want to delete.
4. Click DELETE TARGET(S). On the pop-up, click DELETE. The targets are deleted from the list of sync conflicts.