https://ones.com/blog/knowledge/mastering-active-directory-synchronization-best-practices/