Managing Users

In the Omnissa Access service, users are identified uniquely by both their name and domain. This allows you to have multiple users with the same name in different Active Directory domains. User names must be unique within a domain.

Before you set up the directory in the Omnissa Access you specify which default user attributes are required and add additional attributes that you want to map to Active Directory attributes. The attributes and filters you select in Active Directory to map to these attributes determine which Active Directory users sync in the directory. See the Directory Integration with Omnissa Access publication for more information about integrating Active Directory with Omnissa Access.

The Omnissa Access service supports having multiple users with the same name in different Active Directory domains. User names must be unique within a domain. For example, you can have a user jane in domain eng.example.com and another user jane in domain sales.example.com.

Users are identified uniquely by both their user name and domain. The userName attribute in Omnissa Access is used for user names and is typically mapped to the sAMAccountName attribute in Active Directory. The domain attribute is used for domains and is typically mapped to the canonicalName attribute in Active Directory.

During directory sync, users that have the same user name but different domains are synced successfully. If there is a user name conflict within a domain, the first user is synced and an error occurs for subsequent users with the same user name.

Tip: If you have an existing Omnissa Access directory in which the user domain is incorrect or missing, check the domain settings and sync the directory again. See Selecting Users and Groups to Sync.

In the Omnissa Access console, you can identify users uniquely by both their user name and domain. For example:

• In the Users and Groups column on the Monitor > Dashboard page, users are listed as user name (domain). For example, Jane (sales.example.com).
• In the Accounts > Users page, the DOMAIN column indicates the domain to which the user belongs.
• Reports that display user information, such as the Resource Entitlements report, include a DOMAIN column.

When end users log in to the user portal, on the login page they select the domain to which they belong. If multiple users have the same user name, each can log in successfully using the appropriate domain.

Note: This information applies to users synced from Active Directory. If you use a third-party identity provider and configured Just-in-Time user provisioning, see Just-In-Time Provisioning for information. Just-in-Time user provisioning also supports multiple users with the same user name in different domains.