Implement Outlook Live Directory Sync for Live@edu


Applies to: Live@edu

Topic Last Modified: 2011-12-05

Outlook Live Directory Sync (OLSync) is the synchronization solution for Microsoft Live@edu customers. If you are running a cloud-based e-mail service with Microsoft Office 365 for enterprises, you must use the Microsoft Online Services Directory Synchronization tool to synchronize your directories.

Outlook Live Directory Sync (OLSync), formerly known as GALSync 2010, is a directory synchronization tool that you use to replicate and synchronize user information between your on-premises Active Directory Domain Services (AD DS) or Active Directory directory service and Outlook Live. The goal of directory synchronization is to represent a single entity in different identity databases, and to keep the information about that entity consistent and up-to-date.

To get up and running with OLSync, make sure to read the following topics:

But first, here's a quick Q and A.

What does OLSync do?

OLSync pulls user, contact, group, and dynamic distribution group data from your on-premises AD DS or Active Directory and replicates and synchronizes it with your Outlook Live domain.

After OLSync pulls in the data, it creates, manages, and deletes accounts in Outlook Live, a process called "auto-provisioning." In addition, OLSync populates the shared address book in the corresponding Outlook Live domain.

When OLSync runs, it completes a one-way synchronization from your directory to the Outlook Live datacenter that Microsoft operates. OLSync doesn't write information back to your directory.

OLSync doesn’t synchronize passwords. If you want to synchronize passwords, you can install and use Password Change Notification Service (PCNS).

What do I get with OLSync?

OLSync is made up of the following components:

  • Synchronization engine   OLSync relies on a directory synchronization engine to manage the synchronization of objects from your on-premises AD DS or Active Directory to the Outlook Live datacenter. The current version of OLSync supports Microsoft Forefront Identity Manager (FIM) 2010 and Microsoft Identity Lifecycle Manager (ILM) 2007 FP1 only.

  • Management agents   FIM 2010 and ILM 2007 use management agents to establish and maintain authenticated connections to your organization and to the Outlook Live datacenter. OLSync uses two management agents: the Active Directory Management Agent (ADMA) and the OLMA. Together, these management agents optimize the connection of your on-premises directory to your Outlook Live domain.

  • Rule sets   Rule sets are software templates that provide the business logic for synchronizing between AD DS or Active Directory and Outlook Live. OLSync includes one rule set that defines address book synchronization and auto-provisioning. The rules for address book synchronization push the group and user objects that you specify into the Outlook Live shared address book. The rules for auto-provisioning let you to create, update, and delete users in Outlook Live by using your on-premises directory and Microsoft Exchange management tools.

To synchronize with Outlook Live, you can use the current release of OLSync to import the management agents and rule sets for an AD DS or Active Directory running Microsoft Exchange Server 2003 or later versions of Microsoft Exchange on-premises. After you import the management agents and rules sets, and make some basic configurations, you can begin synchronizing.

What do I need to deploy OLSync?

The following are required:

  • An on-premises AD DS or Active Directory   The user and group objects that you want to synchronize with Outlook Live have to originate in your on-premises directory. If you're running Exchange 2003 or later versions of Microsoft Exchange, you can use the native Exchange and Active Directory user management tools to auto-provision users.

    If you aren't running AD DS or Active Directory on-premises, you can use components of the OLSync solution to automate address book synchronization and provisioning as part of your own customized solution. However, a customized solution isn't supported by OLSync and requires expertise with FIM 2010 or ILM 2007 FP1.

  • Forefront Identity Manager (FIM) 2010 or Identity Lifecycle Manager 2007 FP1   For software and hardware requirements for OLSync, see OLSync Prerequisites for Live@edu.

Related help topics
No resources were found.