hello, 

i want to ask about join criteria for the Active Directory management agent 

Currently my join criteria is based on samAccountName, and i want to know if it is a good idea to change the join to be based on ObjectSid ? 

Regards

Hello,

you should use a join on a Attribute that is not deliverd by AD otherwise if you Need to clear the CS alls that attributes are gone from MV, and you cannot re-join the objects.

samAccountName can be used as Long as it is "calculated" elsewhere (HR Import or Portal) for example.

Best Option is to choose some Kind of corporate wide lifetime ID or employee ID

Keep in Mind, samAccountName changes on names changes (marriage) and objectSID can change on AD migrations/consolidations.

Regards
Peter