OpenIDM - AD Users REST API -

i'm new openidm, i'm trying execute following query, getting 0 results, though have lot of ad users exist, wondering i'm doing wrong,

$ curl \

--header "x-openidm-username: openidm-admin" \ --header "x-openidm-password: openidm-admin" \ "https://localhost:8443/openidm/managed/user?_queryid=query-all-ids"

results:

{"query-time-ms":0,"result":[],"conversion-time-ms":0}

but works groups

$ curl \

--header "x-openidm-username: openidm-admin" \ --header "x-openidm-password: openidm-admin" \ "https://localhost:8443/openidm/managed/group?_queryid=query-all-ids"

thanks

modify sync.json file, add user related information showing in following link, http://docs.forgerock.org/en/openidm/3.1.0/integrators-guide/index/chap-synchronization.html#synchronization-mappings-file

my config looks like,

{ "name" : "manageduser_systemldapaccounts", "source" : "system/ad/account", "target" : "managed/user", ... }

executed recon job mentioned in same doc,

$ curl \ --cacert self-signed.crt \ --header "x-openidm-username: openidm-admin" \ --header "x-openidm-password: openidm-admin" \ --header "content-type: application/json" \ --request post \ "https://localhost:8443/openidm/recon?_action=recon&mapping=systemldapaccounts_manageduser"

also, added routes in managed.json {"name", "user"}, {"name", "account"}, though see doesn't matter much, when execute managed object query, can choose endpoints defined in file , execute different query not related endpoint still works.

thanks