To use the Hub Services People component in the Workspace ONE Intelligent Hub application, you enable the People Search feature in Workspace ONE Access. To set up the feature, you map the Active Directory attributes that are required to retrieve information about employees, including profile pictures and management hierarchy in the Workspace ONE Access console Settings > User Attributes page.

Prerequisites

  • Active Directory integrated with Workspace ONE Access.
  • List of the Active Directory attributes to sync to the directory to create the searchable user profiles and organizational hierarchy.

    Attributes that are required to be mapped are title, managerDN, and distinguishedName. The organizational hierarchy and direct reports information in the People Search results is based on the managerDN attribute. See the Directory Integration Workspace ONE Access guide on the Workspace ONE Access documentation page.

    To sync the user's image to the directory, the Active Directory attribute thumbnailPhoto must be prepopulated with the user's thumbnail photo. To make sure that the photo is viewed correctly in People Search results, make sure that the thumbnail photo image is square and that the minimum image size is 240 px x 240 px.

    You can also select additional attributes that are created as custom attributes in the User Attributes page.

  • When you do not want user names to appear in People Search, set attribute msExchHideFromAddressLists in your Active Directory and map that attribute to msExchHideFromAddressLists in the Workspace ONE Access directory.

    • User accounts with the msExchHideFromAddressLists value set to TRUE do not appear in People Search.
    • User accounts, with msExchHideFromAddressLists set to FALSE or if the attribute value is empty, appear in People Search.

Procedure

  1. In the Workspace ONE Access console Integrations > People Search page, select Enable People Search and click NEXT.
  2. In the page that displays, select the directory to configure for People Search, and click NEXT.
  3. Review the Default Attribute and Additional Attributes lists and select and map the attributes to the Active Directory attributes.
    • The attributes title, managerDN, and distinguishedName are required.
    • The organizational hierarchy and direct reports information in the People Search results is based on the managerDN attribute.
    • To sync user photos from Active Directory, select the imageURL attribute in the Workspace ONE Access directory and map to the thumbnailPhoto attribute in Active Directory.
    • If you configured msExchHideFromAddressLists in your Active Directory to hide some user names, map that attribute to msExchHideFromAddressLists in the Workspace ONE Access directory.

    Click NEXT.

  4. If the Workspace ONE Access service is not already configured to sync all users, specify the DN to sync all users. For example, enter CN=Users,DC=example,DC=com.
    To use the People service successfully, sync all users in your organization to the directory.
    The directory sync profile you configured is added to the Directory > Sync Settings > Users sync list.
  5. Click SAVE & SYNC.

    The Active Directory mapped attributes for People are synced to the directory.

What to do next

In the People Search Sync Status card, click click the pencil icon to verify that the Photo sync frequency is set to your company sync schedule.

Figure 1. Setting People Search Photo Sync Frequency
People Search Sync Status card with photo sync freqency highlighted.
Go to the Hub Services console and enable the People service. See Enabling Access to Workspace ONE People Search in the Hub Service documentation guide.

Managing People Search Attributes and Sync

In the Workspace ONE Access console, you can manually sync the directory and sync photos to update user information for People Search and change the user attributes that are mapped for People Search.

People Search page in Workspace ONE Access console

WHAT HAPPENS IF YOU CLICK DELETE?

Syncing Directory and Photos and Change Photo Sync Frequency

When/why would an admin want to do this?

When and why and caveats for syncing photos...

When you set up People Search in Workspace ONE you scheduled the photo sync frequency. You can change this on the Sync Status card. You can set to frequency to Manually and click SYNC PHOTOS to immediately sync any new photos to the directory.

Edit Configuration

You can edit mapped user attributes you configured for People search.

Please give me an example of why they would edit the configuration.

Is there anything specific that should be called out?

View Sync Logs

Explain how you would use the view sync log information on this page....

Each time a sync is completed, a sync log that shows the directory and photo sync status is generated. . You can view this sync status from the People Search Sync Status card. To view sync details of users and groups that were added or deleted and access alerts that were generated, go to the directory in the Integrations > Directories page and select the Sync Log tab.