If you have an existing VMware Identity Manager directory in which the user domain is incorrect or missing, you must check the domain settings and sync the directory again. Checking the domain settings is required so that users or groups that have the same name in different Active Directory domains are synced to the VMware Identity Manager directory successfully and users can log in.


  1. In the VMware Identity Manager console, go to the Identity & Access Management > Directories page.
  2. Select the directory to sync, then click Sync Settings and click the Mapped Attributes tab.
  3. In the Mapped Attributes page, verify that the VMware Identity Manager attribute domain is mapped to the correct attribute name in Active Directory.
    The domain attribute is typically mapped to the canonicalName attribute in Active Directory.
    The domain attribute is not marked Required.
  4. Click Save & Sync to sync the directory.