[Access Control] How to Synchronize Custom Attributes via HENNGE Directory Sync Tool

Target

• Customers using Access Control
• Customers who want to sync values to Access Control's custom user attributes when syncing users from Active Directory to Access Control

Purpose

Sync information from Active Directory with Access Control's custom user attributes via the HENNGE Directory Sync Tool.

Notes

1. The content of this article is based on information as of January 2026 and may be changed without notice.
2. To link information from Active Directory with custom user attributes, HENNGE Directory Sync Tool version 2.0.8 or later is required.

Procedure

Upgrade the HENNGE Directory Sync Tool

Double-click the installer for the provided HENNGE Directory Sync Tool (File Name: HDEOneDirectorySync-x64.msi) and follow the guide to perform the upgrade.
*It is not necessary to stop the existing HENNGE Directory Sync Tool service during the upgrade.

Edit config.ini

1. Add the following to the [global] section.

   custom_attributes_enabled=true

2. Add the following line to the [;; Default Properties] section where you specify the mapping.

   attr_custom_(ATTRIBUTE_IDENTIFIER)=(AD_ATTRIBUTE)

   Set (ATTRIBUTE_IDENTIFIER) to the ID entered when creating the custom user attribute in Access Control.
   For information on how to create and confirm custom user attributes, please refer to the following article.
   [Access Control] Creating and Editing Custom User Attributes

   For (AD_ATTRIBUTE), set the attribute from Active Directory that will be the sync source.
   Also, add the Active Directory attribute specified as the sync source to the [;; Additional Properties] section.

   Example: If you set "custom_user_attribute" as the custom user attribute ID and want to sync the employee number (employeeID) from Active Directory, add the following to the Default Properties section.

   attr_custom_custom_user_attribute=employeeID

   Also, add the specified employeeID to the Additional Properties section.

   properties=mail,ms-ds-consistencyGUID,employeeID

3. After saving the edited config.ini, restart both the [HDE One Directory Sync] and [HDE One Password Sync] services from the Active Directory service.
   *Restarting the services is required to apply the changes made to config.ini.

Reference

• Installing the HENNGE Directory Sync Tool