GD Bloggers

This is the blog site for Microsoft Global Delivery Communities focused in sharing the technical knowledge about devices, apps and cloud.
Follow Us On Twitter! Subscribe To Our Blog! Contact Us

SharePoint 2010/2013 user profile synchronization

SharePoint 2010/2013 user profile synchronization

  • Comments 11
  • Likes

 

The User Profile Synchronization service is the core of the synchronization architecture in SharePoint Server 2013. When you start the User Profile Synchronization service on the synchronization server, SharePoint Server 2013 provisions a version of Microsoft Forefront Identity Manager (FIM) to participate in synchronization. A User Profile service application can only have one User Profile Synchronization service. A User Profile Synchronization service is associated with connections and mappings.

image

 

 

clip_image001

Plan profile synchronization for SharePoint Server 2013

Profile synchronization (also known as "profile sync") allows you to create user profiles by importing information from other systems that are used in your organization.

You can only run one instance of the User Profile Synchronization service on a farm,The computer on which the User Profile Synchronization service runs is called the synchronization

You specify the synchronization server when you create the User Profile service application. SharePoint Server provisions a version of Microsoft Forefront Identity Manager (FIM) on this computer to participate in synchronization.

When you create the User Profile service application, you can specify the synchronization server (also known as the profile synchronization instance), which is the computer that will be used to synchronize profile information. Creating the User Profile service application creates several databases, such as the profile database.

Important consideration to guarantee successful setup for User Profile Synchronization service

  • User profiles service application should be created before starting the synchronization service
  • MySite should be setup before starting the synchronization service
  • User Profile service application can only have one User Profile Synchronization service that can be defined from the users profiles service application properties (Central administration – manage service applications

               image

image

 

  • The farm account (which runs the timer job) should be added during the setup to local administrators group on the server where synchronization service is going to be run (you can remove the user from the administrators group once the synchronization service is provisioned successfully) .

                     image

Note: After making changes to the farm account, e.g. add admin to administrators (make sure to restart the timer service or restart the server) in order for this change to take effect.

  • The farm account (that runs SharePoint timer service) should has Log On Locally permission to the server on which you are trying to start the User Profile Synchronization service., this can check "allow log on locally" from administrative tools -- local security -- local policies -- user rights assignment.

 

  • Plan account permissions
    • The User Profile Synchronization service runs under the farm account. The farm account requires specific permissions to configure profile synchronization, The Farm account must be a member of the Administrators group on the synchronization server. You can remove this permission after you have configured the User Profile Synchronization service.
    • The Farm account must be able to log on locally to the synchronization server
    • The synchronization account for a connection to Active Directory Domain Services (AD DS) must have the following permissions:

 

  • One of the most important tools for monitoring and troubleshooting the synchronization process is a tool called miisclient.exe located under ..\Program Files\Microsoft Office Servers\15.0\Synchronization Service\UIShell

Now after setting all of the above you can start the User Profile Synchronization Service which might display the status of Starting. When you start the User Profile synchronization service, SharePoint Server provisions FIM to participate in synchronization. This may take 10 minutes.

 

Missing one of the above might cause one of the two below behaviors:

  • User profiles synchronization hang on starting
  • User profiles synchronization stop after starting it.

 

References

Synchronize user and group profiles in SharePoint Server 2013

http://technet.microsoft.com/en-us/library/ee721049.aspx#UPSAProc

Plan profile synchronization for SharePoint Server 2013

http://technet.microsoft.com/en-us/library/ff182925.aspx

Overview of profile synchronization in SharePoint Server 2013

http://technet.microsoft.com/en-us/library/gg188041.aspx

Troubleshoot User profile synchronization issues

http://technet.microsoft.com/en-us/library/gg750257.aspx

Harbar site - User Profile Synchronization

http://www.harbar.net/articles/sp2010ups.aspx

Comments
  • Finally, I do see this. Clearly explained. Well done. Thanks

  • "You specify the synchronization server when you create the User Profile service application. SharePoint Server provisions a version of Microsoft Forefront Identity Manager (FIM) on this computer to participate in synchronization."

    Does this require FIM to be separately licensed?

  • im not a licensing specialist but as far as i know this piece of FIM functionality comes as part of SHarePoint license

  • Issa - Your statement "You can only run one instance of the User Profile Synchronization service on a farm...", is not correct. You can have multiple UPS in a Farm, but only one UPS service can run on 1 SharePoint server, i.e., if you have 3 servers in the farm, you can run 3 seperate UPS's if you need to. We have multiple UPSs/UPAs setup on our Farm due to the various authentication methods we have deployed. That is in SP2010, unless things have changed in SP2013. Thanks.

  • hi Neeraj ,

    thanks for your comment , however this is not my statement this is our statement as Microsoft which you can find it in one of the references i included in this blog technet.microsoft.com/.../ff182925.aspx

    search for the same wording and i hope you will get it right in there :)).  

    however if you refer to my blog above you can see a screen shot for selecting Profile Sychronization instance , the the drop down will not allow you to select more than one server in there

  • How can I stop sync if one of the sources BDC is offline?

  • Why you said "MySite should be setup before starting the synchronization service"? Thanks.

  • Why you said "MySite should be setup before starting the synchronization service"? Thanks.

  • Thanks for this good explanation.

    Faisal Masood
    http://www.FaisalMasood.com

  • Hi Issa,
    In my setup, I am not able to see User Profiles. I can see only User Profile Service Application and my properties tab is grayed out. Do you know why is it like that?

    Thanks in advance!


  • After doing everything you said, I am still unable to start the user profile service Application

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment