[Access Control] Change User Synchronization Source from Active Directory to HENNGE Access Control

Target

• Administrator of HENNGE Access Control

Purpose

• Switch the user sync method of HENNGE Access Control as follows.
  Before: Sync Source: Active Directory → Sync Destination: Microsoft 365 and HENNGE Access Control
  After: Sync Source: HENNGE Access Control → Sync Destination: Microsoft 365 

Notes

1. This article is based on the product specifications as of July 2025 and may be updated without notice.
2. Administrator privileges for HENNGE Access Control are required to verify the actual screen and change settings.
3. Please refer to the following article for how to access the administration screen.
   How to access the HENNGE Access Control administration screen
4. If there are changes to user information, please consult with HENNGE One Technical Support in advance.
5. In user sync from HENNGE Access Control, the information that can be synced is limited to "Family name, Given name, Display Name, Email Address, UPN".
   Please be aware if you are currently syncing information other than these.
    

Introduction: Overview of this task

This procedure changes the starting point of user sync from Active Directory to HENNGE Access Control.
As a result, the management of passwords will also be transferred to HENNGE Access Control.

Overview of the task:

1. Allow sync from HENNGE to Microsoft 365
2. Stop and uninstall sync from Active Directory
3. Set the password policy of HENNGE Access Control
4. Update each user's password
5. Start sync from HENNGE Access Control to Microsoft 365
6. Uninstall HENNGE Directory Sync Tool

Procedure

1. [Preparation] Allow sync from HENNGE to Microsoft 365

For user sync from HENNGE Access Control to Microsoft 365, perform Admin Consent and set the necessary permissions for sync.
Please refer to the following article to perform the settings.

Admin Consent for user sync using Microsoft Graph PowerShell

2. [Switching Task] Stop sync from Active Directory

Stop the following two services on the sync server.

• HDE One Directory Sync
• HDE One Password Sync

Note: Please also stop user sync from Active Directory to Microsoft at this time. For specific steps to stop, please check with Microsoft.

3. [Password Settings] Set the password policy of HENNGE Access Control

 Since the sync source changes from Active Directory to HENNGE, the management of password complexity and length will also be transferred to HENNGE Access Control.
Please refer to the following article to perform the settings.

[Access Control] Password Related Settings

4. [Password Settings] Update each user's password

If passwords were synced from Active Directory, password changes on the user portal are restricted.
To allow password changes on the user portal, you need to use the batch update function to reset the passwords.

1. Please refer to the following article to perform the settings.
   [Access Control] User Batch Update
2. Check if passwords can be changed on the user portal.
   [Access Control] Login Password Change Procedure

Note: Passwords are not synced in the sync from HENNGE Access Control to Microsoft 365. Please set the passwords for each user on the Microsoft 365 side as needed.

5. [Sync Execution] Start sync from HENNGE Access Control to Microsoft 365

Please refer to the following article to start sync from HENNGE Access Control to Microsoft 365.

[Access Control] User Sync Settings (Access Control → Microsoft 365)

Note: Before executing the sync, be sure to perform a dry run and confirm that there are no differences in user information between HENNGE Access Control and Microsoft 365.

6. [Switching Task] Uninstall HENNGE Directory Sync Tool

Uninstall the unnecessary HENNGE Directory Sync Tool.

1. Uninstall the following program from "Programs and Features" in the Control Panel.
   • HDE One Directory Sync x.x.x
2. If the following folders exist after uninstallation, manually delete the entire folder.
   • C:\Program Files\HDE One Directory Sync
   • C:\HDEOne