...

Syncing via Job Shell can be disabled on a per-CO basis via CO Settings >> Disable Org Identity Source Sync.

Creating ePPNs

When syncing records from an Org Identity Source, Registry can automatically create an identifier of type ePPN to be injected into the Org Identity created from the Source. This can be useful for (eg) automatically calculating the ePPN of an IdP associated with the Source. There are two settings:

• EPPN Identifier Type: The Identifier of this type as found in the Org Identity created from the Source will be used as the left-hand site of the newly created ePPN.
• EPPN Suffix: The specified string will be used as the right-hand side of the newly created ePPN. Do not include the @.