* synchronizes users from Active Directory or openldap into Google Apps
* detects new and exited users automatically and changes Google Apps accounts accordingly
* handles user id / account renames automatically
* handles attribute updates automatically
* keeps track of changes and only propagates deltas (to allow syncing every 10 minutes for example)