Auto-Migrate Legacy Custom Attributes to Directory Service

Last updated
Save as PDF

Limited Availability: Auto migration of your legacy custom attributes to the new directory service configuration is a limited availability feature.

The auto-migration copies all Active Directory (AD) sourced custom attributes from the legacy Skyhigh Cloud Connector configuration into the new Directory Service. You can migrate custom attributes only when Active Directory is the data source. Post-migration, the directory service reflects the following updates:

A complete set of the custom attributes from the legacy Skyhigh Cloud Connector is migrated.
Identifiers for Shadow and Sanctioned services are unified.
User Default Display Name field is added, which sets the display name that appears on the Users page.
The Primary Key is added as an ObjectGUID.

NOTES:

Whether you are enabling User Unification in Skyhigh Cloud Connector for the first time or updating an existing setup for the User Unification feature, refer to Getting Started with the User Unification for detailed configuration steps.
For auto-migrating the legacy custom attributes to the new directory service configuration, review the prerequisites.
Auto migration is supported for Skyhigh Cloud Connector version 7.1.0 or later.

Prerequisites

You are eligible for auto-migration only if a single Active Directory (AD) setup is the exclusive data source for custom attributes across your entire tenant. Auto-migration is not supported if you mix data sources (for example, AD and CSV) or if you have multiple AD setups configured across different Cloud Connectors across your entire tenant.

IMPORTANT:

As this is a limited availability feature, upgrading to the latest version does not automatically migrate your legacy custom attributes to the directory service. If you are eligible for auto migration, to successfully migrate to the directory service, you must notify Skyhigh Support before upgrading to the required Skyhigh Cloud Connector version.
This feature is enabled at the tenant level.

Initiate the Auto-Migration

When the above-mentioned prerequisites are met, contact Skyhigh Support to initiate the migration.

Verify the Migration Status

To verify that the migration completed successfully:

Navigate to the Settings > Integrations > Directory Service page in the Skyhigh Security console.
Check the User Attributes section on the Source Details page. If your updated attribute statistics are visible, the backend auto-migration process has completed successfully.