The Multi-Domain Active Directory driver supports user migration from Active Directory domain to the Identity Vault. Migration is only possible at a domain level. You can migrate only one domain at a time. If you have multiple domains in a forest, you must migrate each domain separately. The driver does not support object migration at the forest level.
You can use the Identity Console to migrate the user objects.
To migrate user objects:
In Identity Console, click the IDM Administration tile.
On the Driver Dashboard, locate the driver, then click the driver icon to display the driver’s properties page.
Click the Data Transformation and Synchronization tab.
Click the Migrate into IDVault tab.
Click Edit migration criteria and add the User as class.
Select Show all attributes from all classes and select CN as attribute, then select the users that you want to migrate.
To migrate all users, specify * for the CN attribute. For example, CN=*.
Select MDAD instance and provide the domain DN in LDAP format from where you want to migrate the user objects to Identity Vault.
Example of domain DN in LDAP format: ou=LKG, dc=PreKG, and dc=local.
Click Migrate into IDVault.