I have a basic understanding for attribute sync, create provisioning plan, add necessary rules and hit the sync button. That’s what I have observed during Identity Now implementation for ActiveDirectory Attribute sync.
But when I performed bulk sync I got timeout error for 106 users.
Will it be different if we doing only attribute sync for a Webservice Connector.
is there any difference in bulk sync and real-time sync ?
what is suggested for first time attribute sync; bulk or real-time?
Any real-time experience will be helpful.
Thank you
Based on the observation with Attribute sync. It is better to start with less attributes first in attribute sync. Once the enabled attributes are synced for all the accounts then gradually you can enable attribute sync for remaining while keeping the old once enabled. We too had nearly 100 attributes for AD to be synced so we followed this approach based on the suggesstion from SailPoint. This way it will avoid load during the regular refresh times.
For Webservice or any other source, if you have more number of attributes it is better to follow this approach.
One more observation that I have observed is in sandbox tenant we had to enable very less attributes like 5-10 first and gradually increase them. In prod it was different as prod has more resources we went with more number. So, Prod will always have more resources than snadbox so you may go with more attribute sync attributes.