Question

An administrator deploys Cisco Directory Connector to synchronize users from an on-premises Active Directory to Webex Control Hub. After the initial full sync, the administrator notices that several disabled AD accounts still appear as active users in Control Hub, and newly created AD users are not appearing until the next day. The administrator wants deleted/disabled accounts to be deactivated in Webex more quickly and new users to appear sooner. Which action correctly addresses these requirements?

Accepted Answer

Adjust the Directory Connector incremental (delta) sync schedule to run more frequently and ensure the object-selection filter includes the disabled-account attribute so status changes propagate to Control Hub.

Answer

Switch from Directory Connector to SCIM provisioning, because Directory Connector cannot deactivate users and only performs one-time bulk imports.

Answer

Enable Just-in-Time (JIT) user creation in Control Hub so that AD accounts are created in Webex only when the user first signs in via SSO.

Answer

Manually delete each stale user in Control Hub, since Directory Connector never removes or disables accounts that were previously synchronized.