Parameters for the OLSync Hosted Management Agent for Live@edu

ProvisioningDomain

Yes.

If you configured OLSync with a OLSync service account, the ProvisioningDomain parameter is set to the domain that you specified in the Microsoft ID for that account.

If you configured OLSync to use certificate-based authentication instead of a service account the ProvisioningDomain parameter will be empty and you have to set it.

Note   Certificate authentication is no longer supported for new installations of OLSync.

The ProvisioningDomain parameter is required. It must include at least one accepted domain in Outlook Live.

The ProvisioningDomain parameter is used as a trigger to auto-provision mailboxes in Outlook Live. Only an accepted domain can be a provisioning domain.

You can add multiple domains to this parameter separated by semicolons, for example, contoso.edu; fabrikam.edu.

Do not remove domain entries from the ProvisioningDomain parameter after you have run a synchronization cycle. To change a provisioning domain, add a new domain name to this parameter.

After users are provisioned, changing the value of the ProvisioningDomain parameter doesn't remove those user accounts. Accounts that have been created in Outlook Live will remain and are represented in Microsoft FIM 2010 or Microsoft ILM 2007 FP1 or by a GUID in the metaverse. Therefore, the user accounts will continue to be updated according to the changes on the source object in the on-premises Active Directory Domain Services (AD DS) or Active Directory directory service as long as the object exists in the FIM 2010 or ILM 2007 FP1 metaverse.

MVWindowsLiveIdAttributeName

Yes.

Default is UserPrincipalName.

The MVWindowsLiveIdAttributeName parameter defines how OLSync provisions the Microsoft account names in Outlook Live.

By default, OLSync names new Microsoft accounts according to the userPrincipalName (UPN) attribute on the on-premises recipient object. Therefore, when OLSync provisions new accounts in Outlook Live, the new Microsoft ID matches the on-premises UPN for the corresponding account.

The MVWindowsLiveIdAttributeName parameter takes any attribute name. For example, you can enter customAttribute1 if you are flowing a custom attribute from the on-premises extensionAttribute1 attribute.

You must only enter attributes that hold a single SMTP address value. For this reason, don't enter the proxyAddresses attribute for this parameter. If you want to flow the primary SMTP address from the on-premises mail-enabled users or mailbox-enabled users, leave the MVWindowsLiveIdAttributeName parameter empty. The video demonstration at the end of this topic shows how to configure the primary SMTP address as the provisioning SMTP address.

Do not remove the MVWindowsLiveIdAttributeName parameter from the Additional Parameters page. If the MVWindowsLiveIdAttributeName parameter is removed, OLSync uses the UPN value.

In an environment in which Microsoft Exchange isn't installed on-premises, if the MVWindowsLiveIdAttributeName parameter is set to null, OLSync uses the mail attribute to name the accounts for the Outlook Live mailboxes that are provisioned.

In an environment in which Microsoft Exchange is installed on-premises, and if the MVWindowsLiveIdAttributeName parameter is set to null, OLSync uses the primary SMTP Address in the proxyAddresses attribute on-premises to name the Microsoft IDs for the Outlook Live mailboxes that are provisioned.

PasswordFile

Yes.

Default is report\password.xml

Specify the name and location of the password file, for example, D:\admin\pwd.xml.

If a file name is provided, the default path is <system drive>:\Program Files\Microsoft Identity Integration Server\MaData\Hosted\.

When OLSync provisions a new Microsoft account in Outlook Live, the password for the new Outlook Live account is written to the file that is specified in this parameter.

Initial passwords for each Outlook Live mailbox or Microsoft ID-enabled synchronized user are stored cumulatively in the password file.

You must distribute the initial passwords to your users. By default, the ResetPasswordOnNextLogon parameter is set to True, so users are forced to change the password when they sign in for the first time.

We recommend you specify a secured directory for the password file.

EvictLiveIdOnCreate

No

An e-mail as sign in ID (EASI ID) is a Microsoft ID that was created in a domain namespace before Outlook Live was deployed in the same domain namespace.

For example, a student at Contoso University may have created a Microsoft ID, KwekuA@contoso.edu, before Contoso University enrolled in Outlook Live. After Contoso University establishes a contoso.edu Outlook Live domain, the Microsoft ID, KwekuA@contoso.edu, is an unmanaged EASI ID in the Outlook Live contoso.edu domain.

By default, when OLSync tries to create a mail-enabled user or a mailbox-enabled user in Outlook Live in which a matching EASI ID already exists, an error is logged and a recipient object in Outlook Live isn't created.

You can change this behavior by setting the EvictLiveIdOnCreate parameter to True. When you set the EvictLiveIdOnCreate parameter to True, the EASI ID is evicted from the domain and new recipient objects are created in the Outlook Live domain according to their corresponding on-premises names.

When a Microsoft account status is set to "evict," the account is in a state that forces the user to rename the Microsoft ID the next time the user signs in. After the user renames the Microsoft ID to an unmanaged domain name, the account is fully functional again.

Set the EvictLiveIdOnCreate parameter to True if you want all provisioned accounts in your Outlook Live domain to match the corresponding on-premises accounts.

Setting the EvictLiveIdOnCreate parameter is recommended for organizations that are running in a Connected Federation environment.

If your organization isn't running in a Connected Federation environment, you should consider importing existing Windows Live accounts for users in your organization that already have a Microsoft ID in your domain. For more information, see Import or Evict Existing Microsoft IDs in Live@edu.