Manage User Sync Rules

User Sync rules allow you to select an Active Directory group and add a rule about the products for which the users in this group will receive entitlements for, and what administrative privileges they will have.

You may have multiple rules for a given directory group (also known as organization group), and a user may belong to more than one group in the Active Directory. If you have multiple rules, you can manage the priority of the rules, and if desired, map custom attributes. Once you enable and run User Sync, you can always modify or delete an existing rule. If you run into any issues, you can troubleshoot.

Create Your First Rule or Add a New Rule

Create User Sync rules to tell the system how to provision the users sent from the Active Directory Connector to the admin portal (e.g., assigning products, roles, etc.).

Sign in to GoTo Admin.
In the left navigation, select People > User Sync.
Select + Add a rule.
From the Active Directory group drop-down list, select your desired directory group for which this rule will apply. If desired, you can add notes about this directory group by enabling the Add a note checkbox.

Note: Directory groups are user groups in your Active Directory that are populated by either running the ADC service or groups that were pushed via SCIM provisioning from third-party providers (e.g., Okta, OneLogin, etc.).
Choose a role for this rule's users from the Role in GoTo Admin drop-down list.
Under Products, check the box(es) to enable the product(s) to assign to these users within your selected directory group.
To add a user group to these users, choose a user group that you have created from the drop-down list, or leave as-is to select No Group. For additional information on user groups, refer to How do I create a user group?
Choose a device group for these users from the Device groups drop-down list.
To select a custom settings template you have already created, choose a template from the drop-down list or leave as-is to select Default. A settings template is a specific profile that you can create that allows you to apply a set of default feature settings (per product within your account) to a directory group. To learn more about settings templates, refer to How do I create a settings template?
Change the default language if needed.

Note: An active user can change their own default language settings at any time.
Select Save.
Result: You have created and configured your User Sync rules.

Manage Rule Priority

Manage the order of priority for your User Sync rules.

If you have multiple rules, you can select and drag on each rule to adjust the prioritization of the order in which the rules apply. The rule with the highest ranking (i.e., lowest priority rule number) takes precedence over subsequent rules, meaning Rule #1 takes priority over Rule #2.

If you have users that exist in 1 or more directory groups, all assignments contained within the rule with the highest priority ranking will be used in favor of the same assignments contained in lower priority rule(s). Here are some examples:

A user is in 2 directory groups with 2 rules assigned: Rule #1 is assigned User Group A and Rule #2 is assigned User Group B. Since only 1 user group can be assigned to a user, they will be assigned to User Group A from Rule #1 as it is ranked highest in priority.
A user is in 2 directory groups with 2 rules assigned: Rule #1 is assigned Device Group A and Rule #2 is assigned Device Group B. Since you can have multiple device groups assigned to a user, the user will be assigned both Device Group A and Device Group B.
Note: Device group assignment is only applicable to accounts provisioned with GoToAssist Remote Support.
A user is in 3 directory groups with 3 rules assigned: Rule #1 is assigned GoTo Meeting Pro, Rule #2 is assigned GoTo Meeting Plus, and Rule #3 is assigned GoToAssist Remote Support. The user will be assigned GoTo Meeting Pro (due to higher ranked priority of the rule) and GoToAssist Remote Support.
Note: For rules that contain more than one (1) product tier (e.g., GoTo Meeting Pro and GoTo Meeting Plus), the rule with the highest priority ranking will be assigned, even if it is a lower-tiered product.

Map custom fields in User Sync

Once you have configured user attributes on the ADC v2 (and if desired, created your own custom fields), you can map them in User Sync.

Sign in to GoTo Admin.
From People > User sync, select the Map custom attributes tab.
Use the drop-down menu for each user directory field and map it to your desired value.
Select Save when finished.
Next, proceed to manage your user sync rules.

Enable and Run User Sync

Once you have set up your rules and their prioritization, then you are ready to run User Sync.

Enable the User sync setting.

Result: Congratulations! You have completed all of the steps for setting up the Active Directory Connector v2. You can also learn more about updating the ADC v2 to the latest version when new versions become available.

Modify an existing rule

Choose on the rule you want to modify and then make changes to the priority as needed.
Select Save when complete.

Delete an existing rule

Users within directory groups are never deleted. If all applicable rules for a user are deleted, the user becomes in a state of "suspended" which retains their account and product-related data (e.g., upcoming meetings, stored recordings, etc.). Only the settings within the rule are removed from use while the users will continue remain on your account.

Select to remove a rule.

Article last updated: 14 August, 2023