Behavior:
When attempting to run a synchronization job from Active Directory, the following error is shown in DocuWare Administration, which is preventing new users from being added into our system;
"Unable to cast object of type 'DocuWare.Settings.ExternalUserDirectories.NTUser' to type 'DocuWare.Settings.ExternalUserDirectories.LDAPUser'."

(Note: In this case, the customer has configured a Windows External User Directory for this specific sync job)

Solution:
When utilizing Windows protocol within External User Directory, this method does not offer any detailed configuration options. With this in mind, it is recommended to switch to a LDAP protocol as this provides detailed configuration options that would be more suitable for your DocuWare system. Upon switching to the LDAP protocol, configure the attributes used for the loginname, user object class, identification, etc. The value should be the same as the synchronized usernames you have in DocuWare (Information also applicable for groups). Group object class must be "group", which is only possible by accessing the Active Directory and going through the Attribute Editor as shown below;
Note: For additional information on configuring a LDAP protocol, please see KBA-36910

When attempting to run a synchronization job from Active Directory, the following error is shown in DocuWare Administration, which is preventing new users from being added into our system;
"Unable to cast object of type 'DocuWare.Settings.ExternalUserDirectories.NTUser' to type 'DocuWare.Settings.ExternalUserDirectories.LDAPUser'."

(Note: In this case, the customer has configured a Windows External User Directory for this specific sync job)

Solution:
When utilizing Windows protocol within External User Directory, this method does not offer any detailed configuration options. With this in mind, it is recommended to switch to a LDAP protocol as this provides detailed configuration options that would be more suitable for your DocuWare system. Upon switching to the LDAP protocol, configure the attributes used for the loginname, user object class, identification, etc. The value should be the same as the synchronized usernames you have in DocuWare (Information also applicable for groups). Group object class must be "group", which is only possible by accessing the Active Directory and going through the Attribute Editor as shown below;
Note: For additional information on configuring a LDAP protocol, please see KBA-36910
Note: Using LDAP instead of Windows should fix the behavior/error. Otherwise, there is another workaround which consists of using the User Synchronization V2 tool instead. Please see KBA-36557 for the steps regarding User Synchronization V2.
This KBA is applicable to both On-Premise & Cloud Organizations.
This KBA is applicable to both On-Premise & Cloud Organizations.