Question
We regularly sync users from Active Directory to Access Control.
When checking the sync logs, I noticed that only specific users are included in every user sync.
There have been no changes made to the user information in Active Directory.
Please tell me the cause and how to resolve this.
Answer
There may be unintended spaces at the end of one or more fields being synced from Active Directory.
In Access Control, it is not possible to add spaces at the end of fields such as "Family name," "Given name," or "Display Name." Any trailing spaces are automatically removed during updates.
Therefore, if there are unintended spaces at the end of fields being synced from Active Directory, those users will be targeted for updates during every sync, and the updates will continue to occur.
Removing any trailing spaces from the relevant fields in Active Directory may resolve this issue.