Identifying Synchronized Users

The Distinguished Name attribute is used to track the source status of a user account, i.e. whether the user account was created through a synchronization or by another method. User accounts that were created or updated by a synchronization profile have the distinguished name attribute (from the LDAP user account) added to their user account, the attribute group in that case is LDAP Synchronization. The specific user account properties, which are updated or created by the synchronization, depend on the attribute mapping entries in the synchronization profile.

The User Attributes tab in OneSpan Authentication Server Appliance identifies user accounts that have been synchronized from an LDAP server. For more information about user attributes, see User attributes.