300-820 · Question #164
An administrator deployed the directory connector to synchronize the on-premises Active Directory with the Webex cloud and needs to map attributes from the AD to the corresponding attributes in the…
The correct answer is B. ds-pwp-account-disabled. The Active Directory attribute 'userAccountControl' is a bitmask that indicates the state of an AD user account, including whether it is enabled or disabled. When mapping AD attributes to Webex cloud attributes in Directory Connector, this attribute must be mapped to…
Question
An administrator deployed the directory connector to synchronize the on-premises Active Directory with the Webex cloud and needs to map attributes from the AD to the corresponding attributes in the cloud. To which Webex cloud attribute must the user Account Control attribute be mapped to ensure that users are synced properly?
Options
- AgivenName
- Bds-pwp-account-disabled
- CSipAddresses:type=enterprise
- DdisplayName
How the community answered
(51 responses)- A10% (5)
- B82% (42)
- C6% (3)
- D2% (1)
Explanation
The Active Directory attribute 'userAccountControl' is a bitmask that indicates the state of an AD user account, including whether it is enabled or disabled. When mapping AD attributes to Webex cloud attributes in Directory Connector, this attribute must be mapped to 'ds-pwp-account-disabled' in the Webex cloud schema. This mapping ensures that disabled AD accounts are correctly reflected as disabled in the Webex cloud, preventing deprovisioned users from retaining cloud access. The other options (givenName, SipAddresses, displayName) serve different purposes and do not represent account state.
Topics
Community Discussion
No community discussion yet for this question.