Source & Target Systems
AOH Sync has two distinct types of systems: Source Systems, which supply identity data, and Target Systems, which receive it.
Source Systems
A Source System is any system that holds authoritative identity data for your organization — typically an HR platform, a database-backed system, an API-connected system, or a flat-file feed.
AOH Sync reads from your Source Systems via Connectors. Each Connector is configured with the credentials, schedule, and field mappings needed to pull records from that source. You can connect multiple Source Systems simultaneously; AOH Sync merges the data they provide into a single normalized Identity for each person.
Supported source types include:
HR platforms and payroll systems (via API or CSV/SFTP export)
Database-backed HR and directory systems
API-connected systems
CSV and SFTP file feeds
You manage your Source Systems from the Source Systems screen under Configuration.
AOH Sync never writes back to your Source Systems. It is read-only against every source you connect.
Target Systems
A Target System is where AOH Sync provisions and manages accounts. Currently, AOH Sync provisions to Microsoft Entra ID (formerly Azure Active Directory).
Each Target System you configure represents one Entra ID tenant. AOH Sync uses a service principal — a non-interactive application identity you register in your Entra tenant during setup — to create, update, and disable user accounts on your behalf.
Within a Target System, AOH Sync can manage:
Directory
Creates and updates user accounts; disables accounts on deprovisioning
Applications
Assigns or removes application access based on group membership
Compliance
Reports on account state against your configured compliance posture
Security
Tracks sign-in risk, account status, and policy coverage
Helpdesk
Surfaces identity and account detail for support workflows
You manage your Target Systems from the Target Systems screen under Configuration.
How they work together
AOH Sync reads from all your Source Systems on each sync cycle, resolves any conflicts between them, and writes the authoritative result to your Target System. The Source Systems own the data; the Target System reflects it.
Related
Last updated