Make a Test Run To Check Configuration
To invoke user sync:
Windows: python user-sync.pex ….
Unix, OSX: ./user-sync ….
Give it a try:
./user-sync –v Report version ./user-sync –h Help on command line args
☐ Try the 2 commands above and verify that they are working. (On Windows, the command is slightly different.)
☐ Next, try a sync limited to a single user and run in test mode. You need to know the name of some user in your directory. For example, if the user is firstname.lastname@example.org, try:
./user-sync -t --users all --user-filter email@example.com --adobe-only-user-action exclude ./user-sync -t --users all --user-filter firstname.lastname@example.org --process-groups --adobe-only-user-action exclude
The first command above will sync only the one user (because of the user filter) which should result in an attempt to create the user. Because of running in test mode (-t), the run of user-sync will only attempt to create the user and not actually do it. The
--adobe-only-user-action exclude option will prevent updates to any user accounts that already exist in the Adobe organization.
The second command above (with the –process-groups option) will attempt to create the user and add them to any groups that are mapped from the their directory groups. Again, this is in test mode so no actual action will be taken. If there are already existing users and the groups have users already added to them, user-sync may attempt to remove them. If this is the case, skip the next test. Also, if you are not using directory groups to manage product access, skip the tests that involve –process-groups.
☐ Next, try a sync limited to a single user and don’t run in test mode. This should actually create the user and add to groups (if mapped).
./user-sync --users all --user-filter email@example.com --process-groups --adobe-only-user-action exclude ./user-sync --users all --user-filter firstname.lastname@example.org --process-groups --adobe-only-user-action exclude
☐ Next, go check on the Adobe Admin Console if the user has appeared and the group memberships have been added.
☐ Next, rerun the same command. User sync should not attempt to recreate and re-add the user to groups. It should detect that the user already exists and is a member of the user group or PC and do nothing.
If these are all working as expected, you are ready to make a full run (without the user filter). If you don’t have too many users in your directory, you can try it now. If you have more than a few hundred, it could take a long time so don’t do the execution until you are ready to have a command running for many hours. Also, go over the next few section before doing this in case there are other relevant command line options.