User not syncing — troubleshooting
Use this guide when a user exists in ADAdmin but isn't appearing, or is appearing incorrectly, in a connected platform such as Google Workspace or Microsoft Entra. It also covers someone who is in your MIS but hasn't come through to ADAdmin at all — see The user doesn't exist in ADAdmin at all.
First: is your cloud sync paused?
Check this before anything else, especially over the summer. Once a year — typically from mid-July until the start of term — your school's cloud sync pauses, and Realsmart stops sending anything to Google Workspace or Microsoft Entra.
Open Users. If there's a Cloud sync is paused until … banner at the top of the page (your Dashboard also shows a Sync is frozen for the summer card), that is your answer: the account was created correctly and simply hasn't been sent yet. It will appear in your platform automatically when sync resumes on the date shown, and nothing is lost.
None of the steps below apply while that banner is showing — the log will hold no error for the user, because no attempt was made.
If a single account genuinely can't wait, Send now on the user's page pushes them through. See Cloud sync is paused.
If there's no banner, carry on below.
The user doesn't exist in ADAdmin at all
The steps further down assume the person already has an ADAdmin record. If they're in your MIS (SIMS, Arbor, Bromcom and so on) but don't show up in Users at all, check these first, in order.
-
Your sync is frozen for the summer. While the provisioning window is closed, nothing new comes in from your MIS. New staff and incoming pupils can still be given accounts early with Release early accounts on Data → Incoming learners and mentors — see Release early accounts during the freeze. Everyone else arrives when sync resumes.
-
The MIS import hasn't picked them up yet. MIS imports run on weekdays at 03:00, 05:00 and 15:00. Someone added to the MIS arrives at the next import after your MIS shares them with Realsmart. On the Dashboard, the Sync centre shows the Last MIS import. On a weekday it should be today. To bring changes in sooner, select Sync now there. It brings in what has changed in your MIS, and once used it's unavailable for 3 hours.
-
MIS sync is set to Preview, or switched off. On School settings → Sync services, the MIS sync card shows it. With Preview chosen the fetch runs on schedule but nothing is imported (the run shows as skipped — mis-preview; see MIS sync preview). With MIS sync OFF nothing is imported either, and the MIS log reads IMPORT DISABLED. Turn it back on (or switch to Live — import changes) and the next import catches up.
-
They haven't started yet. A pupil who is still an applicant or pre-admission in your MIS is only imported once someone at your school has chosen them — see Import pre-admission students. Staff only come through once they're a current employee in the MIS, unless Import pending mentors is on and their start date qualifies. Both settings have a Preview that shows who's held back and why.
-
Their ID is missing or shared with someone else. The import matches each person to an account on one ID: their UPN, staff code, MIS ID or Wonde ID, depending on your school's settings. If it can't use that ID, it may skip the person's row, or put their details on someone else's account. A first name and surname are also required. If the preferred first name or surname is blank in your MIS, the import uses the legal one, and their account is named with it. A row is only turned away when the first name, or the surname, is missing from both the preferred and the legal name.
- To check: open Logs in the sidebar and type the person's surname into Search. Select Filters, then set Source to MIS / Wonde and Outcome to All outcomes. An entry that says SKIPPED; Reasons: means the import turned their row away, and the reason says why, for example that an ID has already been taken. Also search Users for their UPN or staff code: if another account already has it, the two people clash.
- To fix: ask your MIS manager to fill in the missing ID or give the person a unique one, then wait for the next import.
-
Your school has no valid Wonde ID. If the MIS log says NO WONDE ID CONFIGURED — MIS FETCH SKIPPED, or WONDE ID "…" IS NOT A WONDE REFERENCE — MIS FETCH SKIPPED, Realsmart has no MIS feed set up to read for your school, so nobody new can come in. That's a setting at our end — contact Realsmart support.
If none of these explain it, the person may not be in the data your MIS shares with Realsmart. Contact Realsmart support with their name, role, MIS ID and UPN or staff code, and the date they were added to your MIS.
Step 1: Check the sync log for that user
- Select Users in the sidebar, find the user and select Edit.
- Open the Logs tab. Leave the outcome on All outcomes first — some problems are logged as SKIPPED, not as errors — then narrow to Errors if there's a lot.
- Read the Outcome column for the error message.
You can also open Logs in the sidebar, select Filters and type their username into User.
Common errors and what they mean:
| Error | Likely cause |
|---|---|
| "Account already exists" / conflict | A Google/Entra account with the same username already exists in the platform (created manually or from another school) |
| "Invalid username" / policy violation | The username doesn't meet the platform's naming policy (e.g. too short, reserved name) |
| "Permission denied" / insufficient scope | ADAdmin's service account doesn't have permission — contact the platform owner |
| "Domain not found" | The school's domain isn't configured in Google Admin or Entra |
| "Quota exceeded" | Google limiting how fast Realsmart can make changes (or, less often, a limit on your Google domain). It shows as Will retry and clears by itself; if it doesn't within a day or two, check your licence count in Google Admin and contact Realsmart support |
| Out of time after … NOT attempted | That night's run ran out of time before sending this group change. Nothing changed in Google; it's tried again next run. See Understanding and actioning sync errors |
| MEMBERSHIP REMOVAL HOLD … | Realsmart paused a large group removal for safety. See Realsmart paused some changes to keep your groups safe — there's a card on your Dashboard |
| Adds skipped … group address(es) are held by another account | A group can't be created because its address belongs to someone's account. See Group addresses in use |
| "The specified password does not comply with password complexity requirements" (Entra) | The person's password is too weak for Microsoft: it needs at least 8 characters and three of lower-case, capitals, numbers and symbols, and mustn't be easy to guess. Give them a stronger password — see Password settings |
| "Property givenName has an invalid value" (Entra) | The account has no first name. Add one on the user's profile |
| "No readable default password" (Entra) | The person has no password of their own and the school's default can't be read. Re-save the default in School settings → Password |
| Skipped (Google primary email does not match Realsmart) / Membership changes withheld | The address Realsmart holds is an alias on a different Google account, so the sync won't change that account or its groups. Remove the alias from the other account in the Google Admin console, or see Rename a user if this person was renamed in Google first |
Step 2: Check the user's status in ADAdmin
Go to Users, find the user, and check their status:
- If Suspended in ADAdmin → the user will be suspended in connected platforms too. See User statuses.
- If Active but not in Google/Entra → a sync hasn't run yet or a sync error blocked them. A new account from the MIS normally reaches Google straight after the import that brings it in, and at the latest at the next whole-school Google sync (04:00, Sunday to Friday). It reaches Entra at the next Entra sync (06:00, Sunday to Friday). See How syncing works.
- If Suspended and you don't know why → see Why does a user keep getting suspended?.
Step 3: Trigger a manual sync
If the error was transient (a network blip, a temporary API failure), syncing again may resolve it:
- Open the user (Users → Edit) and select Sync now on the Details tab. This pushes just this user to Google and/or Entra straight away.
- Wait a few minutes, then recheck their Logs tab.
To re-run a whole platform for the school, use Sync status → Quick run — see Trigger a manual sync.
Step 4: Fix data issues in ADAdmin
If the log shows a data error (invalid username, missing school domain, etc.):
- Go to Users → Edit the affected user.
- Correct the field that caused the error (usually the username).
- Select Save changes. Saving pushes the user to Google and/or Entra straight away.
Step 5: Escalate platform-level issues
Some errors require action in the platform itself, not in ADAdmin:
- "Account already exists" — if a Google account was created manually with the same username, it must be renamed or deleted in Google Admin Console before ADAdmin can provision it.
- "Permission denied" — ADAdmin's Google or Entra service account may need permission changes. Contact your IT team or Realsmart support.
- Licence limits — add licences in Google Admin or Entra before the user can be created.
Still stuck?
If you've gone through these steps and the user still isn't syncing, contact Realsmart support with:
- The user's name and username
- Their UPN or staff code, and the MIS ID and Sync ID from the From your MIS panel on their Details tab
- The error message from the sync log
- The date and time of the failed sync attempt
Related
Did this work for you?
If a step looked different on your site, tell us and we'll update the screenshots.
Thanks for your feedback.