Technical Tip: Imported LDAP group membership changes not updated

Description

This article describes the behavior and how to solve an issue with Database synchronization after moving a user account in Active Directory from one group to another and the user is still listed as a member of the original group.   

Scope

FortiNAC.

Solution

The database will not reflect LDAP group membership changes until the next scheduled directory synchronization. 

1. Verify in the directory the user account was moved properly and is listed in the new group.
2. Manually run the task to synchronize the database with the directory to update the changes immediately.
   1. In the Administration UI, navigate to Systems -> Scheduler.
   2. Select Synchronize Users with Directory.
   3. Select Run Now.