{"id":88897,"date":"2023-06-05T13:09:19","date_gmt":"2023-06-05T17:09:19","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=88897"},"modified":"2025-03-04T15:37:55","modified_gmt":"2025-03-04T20:37:55","slug":"use-the-active-directory-integration","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration","title":{"rendered":"Use and Manage the Active Directory Integration (ADI)"},"content":{"rendered":"\n<p>The JumpCloud Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between JumpCloud and on-premise or off-premise AD. As covered in <a href=\"https:\/\/jumpcloud.com\/support\/get-started-adi\">Get Started with the Active Directory Integration<\/a>, the ADI uses two agents: an import agent and a sync agent that can be installed in three (3) configurations. The configurations are determined by where you want to manage users, groups, and passwords.<\/p>\n\n\n\n<ol>\n<li>Manage users, groups, and passwords in AD<\/li>\n\n\n\n<li>Manage users and passwords in either system, or both<\/li>\n\n\n\n<li>Manage users, groups, and passwords in JumpCloud<\/li>\n<\/ol>\n\n\n\n<p>This article covers how to leverage the ADI depending on your configuration and use case. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prerequisites\">Prerequisites<\/h2>\n\n\n\n<ul>\n<li>You\u2019ve read and are familiar with the concepts in step 1 of this series, <a href=\"https:\/\/jumpcloud.com\/support\/get-started-adi\">Get Started with the Active Directory Integration (ADI)<\/a>.<\/li>\n\n\n\n<li>The ADI agent(s) are installed and running on your AD servers. See <a href=\"https:\/\/jumpcloud.com\/support\/Configure-the-Active-Directory-Integration\">Configure the Active Directory Integration<\/a>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-sync-interval\">Sync interval<\/h2>\n\n\n\n<p>The ADI import agents check for updates to users and security groups in the ADI security group (typically named JumpCloud or) in AD every 90 seconds, by default.<\/p>\n\n\n\n<p>The ADI sync agent checks for updates to users and user groups connected to ADI in JumpCloud every 5 seconds.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-use-cases-and-workflows\">Use cases and workflows<\/h2>\n\n\n\n<p>The table shows a summary of the most common use cases and the ADI configurations that support them. Reference <a href=\"https:\/\/jumpcloud.com\/support\/Configure-the-Active-Directory-Integration\">Configure the Active Directory Integration<\/a> for more information.<\/p>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n >\n <table id=\"wpdtSimpleTable-222\"\n style=\"border-collapse:collapse;\n border-spacing:0px;\"\n class=\"wpdtSimpleTable wpDataTable\"\n data-column=\"8\"\n data-rows=\"7\"\n data-wpID=\"222\"\n data-responsive=\"0\"\n data-has-header=\"1\">\n\n <thead> <tr class=\"wpdt-cell-row \" >\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"A1\"\n data-col-index=\"0\"\n data-row-index=\"0\"\n style=\" width:17.651573292402%; padding:10px;\n \"\n >\n ADI Configuration <\/th>\n <th class=\"wpdt-cell wpdt-bold wpdt-valign-middle\"\n data-cell-id=\"B1\"\n data-col-index=\"1\"\n data-row-index=\"0\"\n style=\" width:17.651573292402%; padding:10px;\n \"\n >\n Use case <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"C1\"\n data-col-index=\"2\"\n data-row-index=\"0\"\n style=\" width:7.6745970836531%; padding:10px;\n \"\n >\n User and Group Authority <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"D1\"\n data-col-index=\"3\"\n data-row-index=\"0\"\n style=\" width:7.6745970836531%; padding:10px;\n \"\n >\n Password authority <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"E1\"\n data-col-index=\"4\"\n data-row-index=\"0\"\n style=\" width:7.6745970836531%; padding:10px;\n \"\n >\n Data sync direction <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"F1\"\n data-col-index=\"5\"\n data-row-index=\"0\"\n style=\" width:20.030698388335%; padding:10px;\n \"\n >\n Server type(s) on which agent(s) can be installed <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"G1\"\n data-col-index=\"6\"\n data-row-index=\"0\"\n style=\" width:11.204911742134%; padding:10px;\n \"\n >\n Install Import Agent <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"H1\"\n data-col-index=\"7\"\n data-row-index=\"0\"\n style=\" width:10.437452033768%; padding:10px;\n \"\n >\n Install Sync Agent <\/th>\n <\/tr>\n <tbody> <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left\"\n data-cell-id=\"A2\"\n data-col-index=\"0\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Manage users, groups and passwords in AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B2\"\n data-col-index=\"1\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Extend AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C2\"\n data-col-index=\"2\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/microsoft-logo.jpg\" class=\" alignnone size-full\" width=\"55\" height=\"55\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D2\"\n data-col-index=\"3\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/microsoft-logo.jpg\" class=\" alignnone size-full\" width=\"55\" height=\"55\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E2\"\n data-col-index=\"4\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-to-JC-data-flow.jpg\" class=\" alignnone size-full\" width=\"147\" height=\"147\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F2\"\n data-col-index=\"5\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G2\"\n data-col-index=\"6\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <td class=\"wpdt-cell wpdt-align-center\"\n data-cell-id=\"H2\"\n data-col-index=\"7\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-no.jpg\" class=\" alignnone size-full\" width=\"81\" height=\"81\" \/> <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left\"\n data-cell-id=\"A3\"\n data-col-index=\"0\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n Manage users and passwords in either system, or both <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B3\"\n data-col-index=\"1\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n Extend AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C3\"\n data-col-index=\"2\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/microsoft-logo.jpg\" class=\" alignnone size-full\" width=\"55\" height=\"55\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D3\"\n data-col-index=\"3\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E3\"\n data-col-index=\"4\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/bidirectional-data-flow-between-AD-and-JC.jpg\" class=\" alignnone size-full\" width=\"145\" height=\"145\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F3\"\n data-col-index=\"5\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers, Member Servers <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G3\"\n data-col-index=\"6\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"H3\"\n data-col-index=\"7\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left wpdt-empty-cell \"\n data-cell-id=\"A4\"\n data-col-index=\"0\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B4\"\n data-col-index=\"1\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n Minimize AD footprint <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C4\"\n data-col-index=\"2\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D4\"\n data-col-index=\"3\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/microsoft-logo.jpg\" class=\" alignnone size-full\" width=\"55\" height=\"55\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E4\"\n data-col-index=\"4\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/bidirectional-data-flow-between-AD-and-JC.jpg\" class=\" alignnone size-full\" width=\"145\" height=\"145\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F4\"\n data-col-index=\"5\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G4\"\n data-col-index=\"6\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"H4\"\n data-col-index=\"7\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left wpdt-empty-cell \"\n data-cell-id=\"A5\"\n data-col-index=\"0\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B5\"\n data-col-index=\"1\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n Migrate away from AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C5\"\n data-col-index=\"2\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-microsoft-logos.jpg\" class=\" alignnone size-full\" width=\"100\" height=\"100\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D5\"\n data-col-index=\"3\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-microsoft-logos.jpg\" class=\" alignnone size-full\" width=\"100\" height=\"100\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E5\"\n data-col-index=\"4\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/bidirectional-data-flow-between-AD-and-JC.jpg\" class=\" alignnone size-full\" width=\"145\" height=\"145\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F5\"\n data-col-index=\"5\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers, \nMember Servers (Sync agent only) <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G5\"\n data-col-index=\"6\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"H5\"\n data-col-index=\"7\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left\"\n data-cell-id=\"A6\"\n data-col-index=\"0\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n Manage users, groups, and passwords in JumpCloud <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B6\"\n data-col-index=\"1\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n Minimize AD footprint <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C6\"\n data-col-index=\"2\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D6\"\n data-col-index=\"3\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E6\"\n data-col-index=\"4\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-to-AD-data-flow.jpg\" class=\" alignnone size-full\" width=\"143\" height=\"143\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F6\"\n data-col-index=\"5\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers, Member Servers <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G6\"\n data-col-index=\"6\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-no.jpg\" class=\" alignnone size-full\" width=\"81\" height=\"81\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"H6\"\n data-col-index=\"7\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold wpdt-align-left wpdt-empty-cell \"\n data-cell-id=\"A7\"\n data-col-index=\"0\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B7\"\n data-col-index=\"1\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n Migrate away from AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C7\"\n data-col-index=\"2\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D7\"\n data-col-index=\"3\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/jumpcloud-logo.jpg\" class=\" alignnone size-full\" width=\"93\" height=\"93\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E7\"\n data-col-index=\"4\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-to-AD-data-flow.jpg\" class=\" alignnone size-full\" width=\"143\" height=\"143\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"F7\"\n data-col-index=\"5\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n Domain Controllers, Member Servers <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"G7\"\n data-col-index=\"6\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-no.jpg\" class=\" alignnone size-full\" width=\"81\" height=\"81\" \/> <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"H7\"\n data-col-index=\"7\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <img decoding=\"async\" data-media-content=\"wpdt-media-content\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Install-yes.jpg\" class=\" alignnone size-full\" width=\"70\" height=\"70\" \/> <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-workflow-for-managing-users-groups-and-passwords-in-ad\">Workflow for Managing Users, Groups, and Passwords in AD<\/h3>\n\n\n\n<p>When JumpCloud ADI is configured for AD Import only, the illustrations below show the user identity workflows for any user data changes or password updates in this configuration. This method allows Admins to extend their AD Users and Passwords to JumpCloud. JumpCloud can then extend these identities out to resources, such as RADIUS WiFi or VPN networks, SSO Applications, LDAP resources, and more.<\/p>\n\n\n\n<p>If you\u2019re only using AD Import, continue to the <a href=\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#import\">Using AD Import<\/a> section of this article and disregard the Using AD Sync section. <\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-ad-import-agent-only-single-domain-workflow\"><strong>AD Import Agent Only \u2013 Single Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"714\" height=\"333\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100170\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg 714w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow-300x140.jpg 300w\" sizes=\"(max-width: 714px) 100vw, 714px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-ad-import-agent-only-multiple-domain-workflow\"><strong>AD Import Agent Only \u2013 Multiple Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"698\" height=\"566\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100171\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow.jpg 698w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow-300x243.jpg 300w\" sizes=\"(max-width: 698px) 100vw, 698px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-workflow-for-managing-users-groups-and-passwords-in-ad-jumpcloud-or-both\">Workflow for Managing Users, Groups, and Passwords in AD, JumpCloud, or Both<\/h3>\n\n\n\n<p>When the JumpCloud ADI is configured for AD Import and AD Sync, the illustrations below show the user identity workflow for any changes or password updates in this configuration. This scenario allows Admins to not only extend their AD users and Passwords to JumpCloud but to also allow JumpCloud to manage identities and passwords within AD for synced users.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-two-way-sync-single-domain-workflow\"><strong>Two-way Sync \u2013 Single Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"751\" height=\"333\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Bidirectional-single-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100179\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Bidirectional-single-domain-workflow.jpg 751w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Bidirectional-single-domain-workflow-300x133.jpg 300w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-two-way-sync-multiple-domain-workflow\"><strong>Two-way Sync \u2013 Multiple Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"774\" height=\"618\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/Bidirectional-multiple-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100181\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Bidirectional-multiple-domain-workflow.jpg 774w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Bidirectional-multiple-domain-workflow-300x240.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Bidirectional-multiple-domain-workflow-768x613.jpg 768w\" sizes=\"(max-width: 774px) 100vw, 774px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-workflow-for-managing-users-groups-and-passwords-in-jumpcloud\">Workflow for Managing Users, Groups, and Passwords in JumpCloud<\/h3>\n\n\n\n<p>When the JumpCloud ADI is configured for AD Sync only, the illustrations below show the user identity workflow for any changes or password updates in this configuration. This scenario allows Admins to manage identities and passwords within AD solely from JumpCloud for synced users.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-ad-sync-agent-only-single-domain-workflow\"><strong>AD Sync Agent Only \u2013 Single Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"729\" height=\"331\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100189\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg 729w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow-300x136.jpg 300w\" sizes=\"(max-width: 729px) 100vw, 729px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-ad-sync-agent-only-multiple-domain-workflow\"><strong>AD Sync Agent Only \u2013 Multiple Domain Workflow<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"737\" height=\"610\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100190\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow.jpg 737w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow-300x248.jpg 300w\" sizes=\"(max-width: 737px) 100vw, 737px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-using-the-ad-import-agent\">Using the AD Import Agent<\/h2>\n\n\n\n<p>The AD import agent allows you to do the following in JumpCloud from AD:<\/p>\n\n\n\n<ol>\n<li>Import, update, suspend, and delete users <\/li>\n\n\n\n<li>Create groups<\/li>\n\n\n\n<li>Manage group membership<\/li>\n\n\n\n<li>Delegate authentication (AD validates the user’s credentials)<\/li>\n<\/ol>\n\n\n\n<p>If the AD import agent is installed on a DC, it also allows you to:<\/p>\n\n\n\n<ul>\n<li>Sync the user\u2019s password from AD to JumpCloud<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p> When the import agent is installed on a member server, the password is not synced from AD to JumpCloud and is never stored in JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-import-users-from-ad-into-jumpcloud\">To import users from AD into JumpCloud<\/h3>\n\n\n\n<p>The AD Import Agent will only import users that you directly add as a memberOf the JumpCloud ADI Security Group within AD (i.e., the Security Group you created during the AD Import Agent installation).<\/p>\n\n\n\n<p>There are two ways to specify which users to import from AD to JumpCloud: <\/p>\n\n\n\n<ol>\n<li>through a direct membership to the JumpCloud ADI Security Group<\/li>\n\n\n\n<li>through a Security Group that is a member of the JumpCloud ADI Security Group<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>How passwords are handled for users added in AD who already exist in JumpCloud is controlled by the setting for the <kbd>UserTakeoverAction <\/kbd>in the AD import configuration file. The default value is <kbd>deactivate<\/kbd>, which will cause the user\u2019s JumpCloud password to be removed and set to a password pending status. The user will temporarily lose access to their JumpCloud provisioned resources (such as RADIUS, LDAP, SSO apps, etc.) until the password is updated within AD. See the <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for AD Import<\/a> article for more information around <kbd>UserTakeoverAction<\/kbd>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-import-a-single-user-from-ad-to-jumpcloud\">To import a single user from AD to JumpCloud<\/h4>\n\n\n\n<ol>\n<li>Open the Active Directory Users and Computers (ADUC) Menu by clicking the start button, typing \u201cdsa\u201d and clicking the Active Directory Users and Computers icon. <\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" width=\"467\" height=\"87\" class=\"wp-image-88905\" style=\"width: 350px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_icon.jpeg\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_icon.jpeg 467w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_icon-300x56.jpeg 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/p>\n\n\n\n<ol start=\"2\">\n<li>Once ADUC is open, navigate to a user that you would like to import into JumpCloud. <\/li>\n\n\n\n<li>Right-click on the target user and click <strong>Properties<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"748\" height=\"529\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_select_user_properties.jpeg\" alt=\"\" class=\"wp-image-88906\" style=\"width:748px;height:529px\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_select_user_properties.jpeg 748w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_select_user_properties-300x212.jpeg 300w\" sizes=\"(max-width: 748px) 100vw, 748px\" \/><\/figure>\n\n\n\n<ol start=\"4\">\n<li>Navigate to the Member Of tab in the Properties menu. <\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"518\" height=\"671\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof.jpeg\" alt=\"\" class=\"wp-image-88907\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof.jpeg 518w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof-232x300.jpeg 232w\" sizes=\"(max-width: 518px) 100vw, 518px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Click <strong>Add<\/strong>. Then add this user as a member of the JumpCloud ADI Security Group.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"516\" height=\"672\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof_add.jpeg\" alt=\"\" class=\"wp-image-88908\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof_add.jpeg 516w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_user_properties_memberof_add-230x300.jpeg 230w\" sizes=\"(max-width: 516px) 100vw, 516px\" \/><\/figure>\n\n\n\n<ol start=\"6\">\n<li>Click <strong>Apply<\/strong>. Wait up to 90 seconds and then check to see if the user has been fully imported into JumpCloud. This validates that your AD Import Agent is working appropriately.<\/li>\n<\/ol>\n\n\n\n<p>The user is created with a Password Status of Password Pending and will have an AD Integration badge below their email address. The user state is controlled by setting for <strong>Users>Settings>Default User State for User Creation> Manual\/Single User API.<\/strong> See <a href=\"https:\/\/jumpcloud.com\/support\/manage-user-states\">Manage User States<\/a> for more information about this setting.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Users who existed in AD before the AD import agent was installed can log in to JumpCloud using their existing AD password. Their credentials will be validated by AD through delegated authentication.<\/p>\n\n\n\n<p>If the import agent is installed on your DCs, user passwords will automatically be imported\/updated in JumpCloud. <\/p>\n\n\n\n<p>The Password Status for imported users will be <strong>Delegated<\/strong> by default unless you manually change the Delegated Authority setting on the user record. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"959\" height=\"418\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_list_imported.jpeg\" alt=\"\" class=\"wp-image-88909\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_imported.jpeg 959w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_imported-300x131.jpeg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_imported-768x335.jpeg 768w\" sizes=\"(max-width: 959px) 100vw, 959px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-import-multiple-users-from-ad-into-jumpcloud\">To import multiple users from AD into JumpCloud:<\/h4>\n\n\n\n<p>This method allows you to import all users that are members of a specific Security Group. For example, if you want to export all AD users that are members of the Accounting Security Group, you would make the Accounting Security Group a memberOf the JumpCloud ADI Security Group. This will then import the Accounting Security Group and all users that are associated members.<\/p>\n\n\n\n<ol>\n<li>Open the Active Directory Users and Computers (ADUC) Menu by clicking the start button, typing \u201cdsa\u201d and clicking the Active Directory Users and Computers icon. <\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" width=\"467\" height=\"87\" class=\"wp-image-88905\" style=\"width: 350px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_icon.jpeg\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_icon.jpeg 467w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_icon-300x56.jpeg 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/p>\n\n\n\n<ol start=\"2\">\n<li>Once ADUC is open, navigate to a user that you would like to import into JumpCloud. <\/li>\n\n\n\n<li>Right-click on the target Security Group and click <strong>Properties<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/fyGGELlDdzyg6qy04uqoYp1Dr5uhshXfMAOtd-FDUja7dKmdzDGqm3ApOEoeevApamYFKXqgakFB-u5vb10VfmQpC0WTreDrPzhh1a23LmRbeyrvJWGkZdDB3M_AoBZs3Dj4XEjJqhMsg6k3moAdUGM\" width=\"800\" height=\"559\"><\/p>\n\n\n\n<ol start=\"4\">\n<li>In the Security Group Properties Menu, click the <strong>Member Of<\/strong> tab and click <strong>Add<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" width=\"500\" height=\"567\" src=\"https:\/\/lh7-us.googleusercontent.com\/5hJjJKCynAg5wtAH2EbeA5rWck04QeZCnNN9ZuYosrZEoMp-84S6oUZgus4O0mQ9ERqlUO-0ThQHkjqbug-UuzwZevbjDfns44gbCwwSdtvF75iDUD0hAj-3pElqPH9cp3MYX5tDd0Gx6TmpK99UXew\"><\/p>\n\n\n\n<ol start=\"5\">\n<li>Add this Security Group to the JumpCloud-named Security Group and click Apply.<\/li>\n\n\n\n<li>Wait 90 seconds for both the Security Group and the Users within that Security Group to be created in JumpCloud. You will see both the user accounts and user groups within JumpCloud\u2019s Admin Portal marked by an AD Integration badge.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"932\" height=\"470\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_list_group_imported.jpeg\" alt=\"\" class=\"wp-image-88912\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_group_imported.jpeg 932w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_group_imported-300x151.jpeg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_group_imported-768x387.jpeg 768w\" sizes=\"(max-width: 932px) 100vw, 932px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"725\" height=\"680\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_list_ad_badge.jpeg\" alt=\"\" class=\"wp-image-88913\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_ad_badge.jpeg 725w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_ad_badge-300x281.jpeg 300w\" sizes=\"(max-width: 725px) 100vw, 725px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>When the delegated authentication setting, <strong>Delegated Password Validation<\/strong>, is disabled, users who existed in AD before the AD import agent was installed must update their password in AD or an AD-managed resource for the Password Status to become active in JumpCloud and allow them to log in to the JumpCloud user portal and use JumpCloud SSO. <\/p>\n\n\n\n<p>If the import agent is installed on your DCs, users created in AD after the AD import agent was installed will have their passwords automatically imported\/updated in JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-sync-users-passwords-from-ad-to-jumpcloud\">To manage passwords<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-manage-passwords-in-a-one-way-sync-from-ad-to-jumpcloud-the-managing-users-groups-and-passwords-in-ad-configuration\">To manage passwords in a one-way sync from AD to JumpCloud (Managing Users, Groups, and Passwords in AD)<\/h4>\n\n\n\n<p>In this configuration, the delegated authentication setting, <strong>Delegated Password Validation<\/strong>, is enabled by default and cannot be disabled in the ADI configuration. This means whenever an AD imported user logs in to the JumpCloud user portal or performs a JumpCloud SSO login, their password is validated by AD and not JumpCloud.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-new-users\"><strong>New users<\/strong><\/h5>\n\n\n\n<p>Users imported from AD into JumpCloud, can log in to JumpCloud immediately using their company email address and AD password.<\/p>\n\n\n\n<p>When AD users are imported from AD into JumpCloud, there is no password associated with their account in JumpCloud. The <strong>Password Authority<\/strong> and <strong>Delegated Authority<\/strong> are automatically set to <strong>Active Directory<\/strong> on their user record. The <strong>Password Status<\/strong> will be <strong>Delegated<\/strong> and show as “Managed by AD”. <\/p>\n\n\n\n<p>If the import agent is installed on a member server:<\/p>\n\n\n\n<ul>\n<li>The user’s password will never sync from AD to JumpCloud and will never be stored in JumpCloud.<\/li>\n<\/ul>\n\n\n\n<p>If the import agent is installed on a DC:<\/p>\n\n\n\n<ul>\n<li>The user’s AD password will be stored in JumpCloud the first time the user logs into the JumpCloud user portal and will sync from that point forward.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-manage-passwords-in-a-two-way-sync-from-ad-to-jumpcloud-managing-users-groups-and-passwords-in-ad\">To manage passwords in a two-way sync from AD to JumpCloud (Managing Users, Groups, and Passwords in AD, JumpCloud, or Both)<\/h4>\n\n\n\n<p>In this configuration, the delegated authentication setting, <strong>Delegated Password Validation<\/strong>, is disabled by default and is editable. This means the user must have an active password in JumpCloud to log in to the JumpCloud user portal or performs a JumpCloud SSO login.<\/p>\n\n\n\n<p>When AD users are imported from AD into JumpCloud, there is no password associated with their account in JumpCloud. The <strong>Password Authority<\/strong> is set to <strong>None (JumpCloud) <\/strong>and <strong>Delegated Authority<\/strong> is set to <strong>None<\/strong> on their user record by default. <\/p>\n\n\n\n<p>Until the user sets a password in JumpCloud or changes their password in AD if the import agent is installed on a DC, You\u2019ll see the newly imported users in JumpCloud marked with an AD badge and in an orange Password Pending password status within the user menu.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>When ADI delegated authentication setting, <strong>Delegated Password Validation<\/strong>, is set to <strong>None<\/strong>, users who existed in AD before the AD import agent was installed must set a password in JumpCloud to match their AD password or, if the import agent is installed on DCs, update their password in AD or an AD-managed resource for the Password Status to become active in JumpCloud and enable them to access JumpCloud managed resources. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h5 class=\"wp-block-heading\" id=\"h-to-sync-a-password-from-ad-to-jumpcloud\">To sync a password from AD to JumpCloud<\/h5>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Syncing passwords from AD to JumpCloud is only applicable when the import agent is installed on DCs. When the import agent is installed on member servers, the password is not synced from AD to JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol>\n<li>When a user’s <strong>Delegated Authority<\/strong> is set to <strong>Active Directory<\/strong>, \n<ul>\n<li>The user’s AD password will be stored in JumpCloud the first time the user logs into the JumpCloud user portal and will sync from that point forward.<\/li>\n\n\n\n<li>Password changes will sync within 90 seconds after the user changes their password in AD or on an AD-managed resource<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>When a user’s <strong>Delegated Authority<\/strong> is set to <strong>None<\/strong>, \n<ul>\n<li>The user will need to change their password in AD or on an AD-managed resource before they can log in to the JumpCloud user portal or with JumpCloud SSO. <\/li>\n\n\n\n<li>Password changes will sync within 90 seconds after the user changes their password in AD or on an AD-managed resource. In the JumpCloud Admin Portal <strong>Users<\/strong> page, the user\u2019s Password Status will be a green check-marked active statuswith the expiry date from AD.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The password expiry date for AD-managed users is the expiry date from AD as the expiry is managed by AD, not JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"951\" height=\"565\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_list_active_users.jpeg\" alt=\"\" class=\"wp-image-88914\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_active_users.jpeg 951w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_active_users-300x178.jpeg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_list_active_users-768x456.jpeg 768w\" sizes=\"(max-width: 951px) 100vw, 951px\" \/><\/figure>\n\n\n\n<ol start=\"3\">\n<li>All Password changes moving forward will need to be done within AD or on AD-bound resources. <\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If you\u2019re planning on using AD Sync alongside AD Import, Passwords can be updated in JumpCloud after this required initial password change has taken place within the steps outlined above. This is a requirement for both AD Import only and AD Import & Sync use cases. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-create-update-and-disable-user-accounts\">To create, update, and disable user accounts<\/h4>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>These changes on a user or user group will be reflected within JumpCloud in approximately 90 seconds. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Now that AD Import has been successfully installed and configured, AD Admins will be able to manage JumpCloud user accounts and the following attributes within AD for any CrUD updated (Create, Update, and Deactivate\/Disable):<\/p>\n\n\n\n<ul>\n<li>firstname<\/li>\n\n\n\n<li>lastname<\/li>\n\n\n\n<li>username<\/li>\n\n\n\n<li>email<\/li>\n\n\n\n<li>password, and<\/li>\n\n\n\n<li>user state (active or disabled)<\/li>\n<\/ul>\n\n\n\n<p>If the <strong>SyncAdditionalAttributes<\/strong> setting is <kbd>true<\/kbd> in the <kbd>jcadimportagent.config.json<\/kbd> file, the following attributes are also updated:<\/p>\n\n\n\n<ul>\n<li>displayname<\/li>\n\n\n\n<li>description<\/li>\n\n\n\n<li>JobTitle<\/li>\n\n\n\n<li>department<\/li>\n\n\n\n<li>company<\/li>\n\n\n\n<li>location<\/li>\n\n\n\n<li>employeeType<\/li>\n\n\n\n<li>phoneNumbers<\/li>\n\n\n\n<li>addresses<\/li>\n\n\n\n<li>manager <\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-creating-new-users-in-ad\">Creating new users in JumpCloud from AD<\/h4>\n\n\n\n<p>Follow the same process outlined above for importing users from AD into JumpCloud.<\/p>\n\n\n\n<p>To create new users in AD and JumpCloud:<\/p>\n\n\n\n<ol>\n<li>Create a new user account in AD<\/li>\n\n\n\n<li>Add the user to the JumpCloud ADI security group<\/li>\n\n\n\n<li>Wait 90 seconds<\/li>\n\n\n\n<li>Verify the user was created in JumpCloud.<\/li>\n<\/ol>\n\n\n\n<p>To import an existing AD user in JumpCloud:<\/p>\n\n\n\n<ol>\n<li>Add an existing AD user to the JumpCloud ADI security group<\/li>\n\n\n\n<li>Wait 90 seconds<\/li>\n\n\n\n<li>Verify the user was created in JumpCloud.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-updating-user-attributes-in-ad\">Updating user attributes in JumpCloud from ad<\/h4>\n\n\n\n<p>When you change any attributes of an AD user which is currently synced via the AD Import Agent, this will reflect within your JumpCloud tenant in approximately 90 seconds. For example, if you change the First or Last Name of a user, this will reflect on the JumpCloud user\u2019s First or Last Name attribute in 90 seconds. <\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-disabling-users-in-ad\">Suspending or deleting users in JumpCloud from AD<\/h4>\n\n\n\n<p>When deleting, suspending, or deactivating users within AD, this will in turn either suspend or delete the users in JumpCloud thus removing access to any of the JumpCloud-managed resources he or she had access to such as RADIUS, LDAP, or SSO Applications. The specific behavior is determined by the settings in the <kbd>jcadimportagent.config.json<\/kbd> file.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-using-ad-sync\">Using AD Sync<\/h2>\n\n\n\n<p>If you\u2019re choosing to also leverage the functionality of AD Sync Agent with your AD Integration, this allows JumpCloud to push CrUD changes of synced users down to AD. With the AD Sync Agent in place, you will be able to do the following: <\/p>\n\n\n\n<ol>\n<li>Create users in JumpCloud which will then push down to AD.<\/li>\n\n\n\n<li>When users change passwords in JumpCloud, this new password will be pushed down to their AD user account. <\/li>\n\n\n\n<li>When you suspend or delete a user in JumpCloud, this will disable the user Account in AD. <\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-sync-an-existing-user-from-jumpcloud-to-ad-nbsp\">To sync an existing user from JumpCloud to AD <\/h3>\n\n\n\n<p>This functionality allows JumpCloud users to be created in AD if they don\u2019t exist or allows JumpCloud to either take over management of the user if you have configured a one-way sync from JumpCloud to AD (only the AD sync agent is running) or co-manage the user with AD in a 2-way sync configuration (both the AD import and AD sync agents are running).<\/p>\n\n\n\n<p>Follow the steps below to sync users from JumpCloud to AD.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>If you are managing users in both JumpCloud and AD (two-way sync), and you left the default setting for <kbd>UserTakeoverAction<\/kbd>, which is <kbd>deactivate<\/kbd>, when you sync user with passwords from JumpCloud to AD, the AD import agent will change the JumpCloud user passwords status from Active to Password Pending. This results in these users losing access to any resources assigned to them in JumpCloud. To prevent this, we recommend to see <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for AD Import<\/a> and change the <kbd>UserTakeoverAction <\/kbd>attribute to retain.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol>\n<li>Navigate to your user in JumpCloud and open up their Details. <\/li>\n\n\n\n<li>Click on the user groups tab on the user aside. <\/li>\n\n\n\n<li>Assign user to a JumpCloud group and click Save.<\/li>\n\n\n\n<li>Wait for Active Directory badge to appear.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"449\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_AD_badge-1024x449.png\" alt=\"\" class=\"wp-image-88915\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_AD_badge-1024x449.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_AD_badge-300x132.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_AD_badge-768x337.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_AD_badge.png 1253w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Bind this user to the user group which they need to be a <em>memberOf<\/em> in AD (that is also synced using the ADI). In our example, we can see the Accounting User Group is tied to AD via the Directories in the drop-down menu.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"527\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge-1024x527.png\" alt=\"\" class=\"wp-image-88916\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge-1024x527.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge-300x154.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge-768x395.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge-1536x790.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/console_users_details_ad_badge.png 1648w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"6\">\n<li>Click <strong>Save User<\/strong>. The user will then be created in the Root User Container within your AD domain. This can take up to 90 seconds.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"909\" height=\"636\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/aduc_root_user_container_sync.jpeg\" alt=\"\" class=\"wp-image-88917\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_root_user_container_sync.jpeg 909w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_root_user_container_sync-300x210.jpeg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/aduc_root_user_container_sync-768x537.jpeg 768w\" sizes=\"(max-width: 909px) 100vw, 909px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Users who are created in AD from JumpCloud are automatically put into the Root User Container you configured during the installation of the AD Import & Sync Agents. If you need to move the user to the appropriate OU or sub OU, you\u2019ll have to do this within AD on the DC.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-create-update-and-deactivate-user-accounts\">To create, update and deactivate user accounts<\/h3>\n\n\n\n<p>The following section covers how to manage AD user accounts from JumpCloud. With the AD Sync in place, JumpCloud Admins are able to manage AD users from the JumpCloud Admin Portal. This makes user onboarding, off-boarding, and management much easier. Additionally, this may help with removing the need to remotely access the DC for simple tasks within the Identity Lifecycle for user accounts.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-creating-users-in-jumpcloud\">Creating Users in JumpCloud<\/h4>\n\n\n\n<p>JumpCloud Admins can create users in AD by binding any JumpCloud user to an AD Integrated User Group within JumpCloud. For example, if you\u2019ve synced the Accounting group from AD to JumpCloud via the Import Agent, then any JumpCloud user bound to this synced user group will be created within AD under the Root User Container. <\/p>\n\n\n\n<p>The user is created within AD, is a memberOf the associated user group (Security Group in AD), and their AD user account will use their JumpCloud Password. <\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-suspending-or-deleting-users-in-jumpcloud\">Suspending or deleting users in JumpCloud<\/h4>\n\n\n\n<p>Suspending or deleting users within JumpCloud will Disable the user account within AD. JumpCloud in any form will never remove or delete user accounts in any of the 3rd party integrations. (This also includes SAML, LDAP, AD, GWS, and M365). These changes will reflect in 90 seconds.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-managing-adi\">Managing ADI<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-update-agents\">To update agents<\/h3>\n\n\n\n<p>We recommend keeping your agents current to ensure you have the latest security updates, bug fixes, and functionality and to retain support. <\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Directory Integrations > Active Directory<\/strong>.<\/li>\n\n\n\n<li>Select your AD domain<\/li>\n\n\n\n<li>In the Downloads section, select<\/li>\n\n\n\n<li>Select a download location<\/li>\n\n\n\n<li>Upload the agent installation file to the server where the agent is already installed<\/li>\n\n\n\n<li>Run the installation wizard<\/li>\n\n\n\n<li>Only minimal installation screens are shown.\n<ol>\n<li>Directory for where the installation should occur<\/li>\n\n\n\n<li>Finish screen<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Restart the service.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-manage-agents-in-jumpcloud\">To manage agents in JumpCloud<\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Directory Integrations > Active Directory<\/strong>.<\/li>\n\n\n\n<li>Select your AD domain<\/li>\n\n\n\n<li>Click the pause to temporarily stop the agent.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This prevents information from flowing between JumpCloud and AD. For the AD sync agent, changes are still queued.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"5\">\n<li>Click delete to remove the agent from JumpCloud.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Deleting an agent in JumpCloud does not stop the service in AD nor uninstall it.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-change-the-primary-ad-import-agent-role-to-another-domain-controller\">To change the Primary AD Import Agent Role to another Domain Controller<\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Directory Integrations > Active Directory<\/strong>.<\/li>\n\n\n\n<li>Select your AD domain.<\/li>\n\n\n\n<li>Pause all the running agents except for the the Domain Controller that you would like to designate as the Primary Import Agent.<\/li>\n\n\n\n<li>After a short time period, the currently running Import agent will become the Primary Import agent.<\/li>\n\n\n\n<li>Unpause the remaining agents.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-rotate-adi-service-account-passwords-in-ad\">To rotate ADI service account passwords in AD<\/h3>\n\n\n\n<p>The ADI import and sync service account passwords should be rotated on a regular basis for security purposes. <\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-rotating-the-adi-import-service-account-jcimport-password\">Rotating the ADI import service account (jcimport) password:<\/h4>\n\n\n\n<ol>\n<li>Log in to a Domain Controller with an AD domain admin account<\/li>\n\n\n\n<li>Open the registry<\/li>\n\n\n\n<li>Navigate to HKLM\\SOFTWARE\\JumpCloud\\AD Integration Import Agent\\ldap<\/li>\n\n\n\n<li>Edit bind_password<\/li>\n\n\n\n<li>Enter the new password in the Value data field<\/li>\n\n\n\n<li>Click OK<\/li>\n\n\n\n<li>Open services.msc<\/li>\n\n\n\n<li>Restart the JumpCloud AD Integration Import Agent service.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/ze_Bh_72MUrn8jCA4276H5uwRjX3pFbgPKpbqP1FpfTe-m2TYk1RL4gSAFSihtt1knDgL4bfw8afQw466nE5UvpsVi7WYn3gzBYM5QMJfe_QJsl0rKp3lX0fW69Fvhls0zAGezNI-fh1P9HkaD_ah-4\" width=\"1364\" height=\"728\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-rotating-the-ad-sync-service-account-jcsync-password\">Rotating the AD sync service account (<kbd>jcsync<\/kbd>) password:<\/h4>\n\n\n\n<ol>\n<li>Log in to a Domain Controller with an AD domain admin account<\/li>\n\n\n\n<li>Open the registry<\/li>\n\n\n\n<li>Navigate to HKLM\\SOFTWARE\\JumpCloud\\AD Integration Sync Agent\\ldap<\/li>\n\n\n\n<li>Edit bind_password<\/li>\n\n\n\n<li>Enter the new password in the Value data field<\/li>\n\n\n\n<li>Click OK<\/li>\n\n\n\n<li>Open services.msc<\/li>\n\n\n\n<li>Restart the JumpCloud AD Integration Import Agent service.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" src=\"https:\/\/lh7-us.googleusercontent.com\/NyihL2iBoDlxGnDiOSgozoNzUYSh7kfR2ezdxBC0k29a14p1SYy7PxvluDClJ5KwIiHF6NSN76zSF1zsrC0cMyOm_vzhj6EyiVv_yig3FsqLqdO_XyUBeFYrYvkAUu6IwFQ1rJc_xbIiysWtIdvZ1wI\" width=\"1354\" height=\"727\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-change-use-case\">To change ADI Use Case<\/h3>\n\n\n\n<p>For detailed instructions on changing your ADI deployment configuration, read <a href=\"\/\/jumpcloud.com\/support\/adi-change-configuration\">ADI: Change Configuration<\/a>. <\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Directory Integrations > Active Directory<\/strong>.<\/li>\n\n\n\n<li>Select your AD domain<\/li>\n\n\n\n<li>Click <strong>Update Configuration<\/strong><\/li>\n\n\n\n<li>Select the new deployment configuration<\/li>\n\n\n\n<li>Click <strong>Next<\/strong><\/li>\n\n\n\n<li>Follow the steps on each screen.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n >\n <table id=\"wpdtSimpleTable-226\"\n style=\"border-collapse:collapse;\n border-spacing:0px;\"\n class=\"wpdtSimpleTable wpDataTable\"\n data-column=\"5\"\n data-rows=\"8\"\n data-wpID=\"226\"\n data-responsive=\"0\"\n data-has-header=\"1\">\n\n <thead> <tr class=\"wpdt-cell-row \" >\n <th class=\"wpdt-cell \"\n data-cell-id=\"A1\"\n data-col-index=\"0\"\n data-row-index=\"0\"\n style=\" width:18.798151001541%; padding:10px;\n \"\n >\n Use case <\/th>\n <th class=\"wpdt-cell wpdt-bold wpdt-empty-cell \"\n data-cell-id=\"B1\"\n data-col-index=\"1\"\n data-row-index=\"0\"\n style=\" width:15.151515151515%; padding:10px;\n \"\n >\n <\/th>\n <th class=\"wpdt-cell \"\n data-cell-id=\"C1\"\n data-col-index=\"2\"\n data-row-index=\"0\"\n style=\" width:18.438623523369%; padding:10px;\n \"\n >\n New Use Case <\/th>\n <th class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"D1\"\n data-col-index=\"3\"\n data-row-index=\"0\"\n style=\" width:17.822290703647%; padding:10px;\n \"\n >\n <\/th>\n <th class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"E1\"\n data-col-index=\"4\"\n data-row-index=\"0\"\n style=\" width:29.789419619928%; padding:10px;\n \"\n >\n Changes <\/th>\n <\/tr>\n <tbody> <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"A2\"\n data-col-index=\"0\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B2\"\n data-col-index=\"1\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Manage users, groups, and passwords in AD <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C2\"\n data-col-index=\"2\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Manage users and passwords in either system, or both <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D2\"\n data-col-index=\"3\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n Manage users, groups, and passwords in JumpCloud <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"E2\"\n data-col-index=\"4\"\n data-row-index=\"1\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"A3\"\n data-col-index=\"0\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n Manage users, groups, and passwords in JumpCloud <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B3\"\n data-col-index=\"1\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"C3\"\n data-col-index=\"2\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"D3\"\n data-col-index=\"3\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E3\"\n data-col-index=\"4\"\n data-row-index=\"2\"\n style=\" padding:10px;\n \"\n >\n 1. Delete the sync agent from the Admin Portal\n2. Uninstall sync agents on all servers\n3. Follow the instructions in to download and install the import agent(s)\u00a0 <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"A4\"\n data-col-index=\"0\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"B4\"\n data-col-index=\"1\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C4\"\n data-col-index=\"2\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"D4\"\n data-col-index=\"3\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E4\"\n data-col-index=\"4\"\n data-row-index=\"3\"\n style=\" padding:10px;\n \"\n >\n Follow the instructions in to download and install the import agent(s)\u00a0 <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"A5\"\n data-col-index=\"0\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n \nManage users, groups, and passwords in AD <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"B5\"\n data-col-index=\"1\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"C5\"\n data-col-index=\"2\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"D5\"\n data-col-index=\"3\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E5\"\n data-col-index=\"4\"\n data-row-index=\"4\"\n style=\" padding:10px;\n \"\n >\n Follow the instructions in Download and install sync agent(s) on server(s) <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"A6\"\n data-col-index=\"0\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"B6\"\n data-col-index=\"1\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"C6\"\n data-col-index=\"2\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D6\"\n data-col-index=\"3\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E6\"\n data-col-index=\"4\"\n data-row-index=\"5\"\n style=\" padding:10px;\n \"\n >\n 1. Delete the sync agent from the Admin Portal\n2. Uninstall sync agents on all servers\n3. Follow the instructions in to download and install the import agent(s)\u00a0 <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-bold\"\n data-cell-id=\"A7\"\n data-col-index=\"0\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n \nManage users and passwords in either system, or both <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"B7\"\n data-col-index=\"1\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"C7\"\n data-col-index=\"2\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"D7\"\n data-col-index=\"3\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E7\"\n data-col-index=\"4\"\n data-row-index=\"6\"\n style=\" padding:10px;\n \"\n >\n Follow the instructions in to download and install the import agent(s)\u00a0 <\/td>\n <\/tr>\n <tr class=\"wpdt-cell-row \" >\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"A8\"\n data-col-index=\"0\"\n data-row-index=\"7\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"B8\"\n data-col-index=\"1\"\n data-row-index=\"7\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell wpdt-empty-cell \"\n data-cell-id=\"C8\"\n data-col-index=\"2\"\n data-row-index=\"7\"\n style=\" padding:10px;\n \"\n >\n <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"D8\"\n data-col-index=\"3\"\n data-row-index=\"7\"\n style=\" padding:10px;\n \"\n >\n x <\/td>\n <td class=\"wpdt-cell \"\n data-cell-id=\"E8\"\n data-col-index=\"4\"\n data-row-index=\"7\"\n style=\" padding:10px;\n \"\n >\n 1. Delete the import agent(s) from the Admin Portal\n2. Uninstall import agents from all servers <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-manage-nbsp-adi-services-in-ad\">To manage ADI services in AD<\/h3>\n\n\n\n<ol>\n<li>Open services.msc<\/li>\n\n\n\n<li>Select the AD service (JumpCloud AD integration Sync Agent or JumpCloud AD integration Import Agent)<\/li>\n\n\n\n<li>Select the desired action: start, stop, restart<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-modify-agent-configuration\">To modify agent configuration<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-modify-the-ad-import-agent-configuration\">Modifying the AD Import Agent Configuration<\/h4>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The default configuration settings for the the AD import agent are:<\/p>\n\n\n\n<ul>\n<li>UserDissociateAction = remove<\/li>\n\n\n\n<li>UserTakeoverAction = deactivate<\/li>\n\n\n\n<li>UserDisableAction = suspend<\/li>\n\n\n\n<li>UserExpireAction = expire<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol>\n<li>Review <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for the Active Directory Import Agent<\/a> to understand the configuration settings available for the import agent.<\/li>\n\n\n\n<li>In AD, go to the JumpCloud folder where the AD Import agent is installed on a domain controller.<\/li>\n\n\n\n<li>Open the adint.config.json file using a text editor<\/li>\n\n\n\n<li>Edit the configurations in the \u201cMainLoop\u201d section of the file.<\/li>\n\n\n\n<li>Repeat this process for the configuration file on every AD server (DC controller on which AD Import is installed.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-modify-the-root-user-container-nbsp\">To modify the Root User container <\/h3>\n\n\n\n<p>If you decide to use a different Root user container for managing AD resources then you will want to modify or validate the configured Root User container location.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-verify-the-full-ldap-path-for-the-chosen-root-user-container-you-have-selected-in-aduc\">Verifying the full LDAP path for the chosen Root user container you have selected in ADUC<\/h4>\n\n\n\n<ol>\n<li>From the ADUC panel\u2019s View menu, enable Advanced Features. <\/li>\n\n\n\n<li>Right-click the container and select Properties. <\/li>\n\n\n\n<li>Select the <strong>Attribute Editor<\/strong> tab. <\/li>\n\n\n\n<li>Select the \u201cdistinguishedName\u201d attribute, then click <strong>View<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"895\" height=\"623\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_2481a20e.png\" alt=\"\" class=\"wp-image-113677\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_2481a20e.png 895w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_2481a20e-300x209.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_2481a20e-768x535.png 768w\" sizes=\"(max-width: 895px) 100vw, 895px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-modify-the-root-user-container-in-ad-sync-configuration-settings\">Modifying the Root User container in AD sync configuration settings<\/h4>\n\n\n\n<p>Stop the JumpCloud AD Integration Sync service and make the required Sync Agent config changes:<\/p>\n\n\n\n<ol>\n<li>Open Registry Editor by clicking the <strong>Start <\/strong>button and typing in <kbd>regedit<\/kbd>. Click on the Registry Editor icon.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" alt=\"Registry Editor.jpg\" src=\"https:\/\/lh7-us.googleusercontent.com\/Gi8KlsLqRQeM5rG8YvF3v617-N9plCy3Fa18fL3_KbGpo3OvFMsQEtlO9M310eLj5aOqIGPsT-538xcJCZpcXQpx-niibKr0gQS6aNjnu_I-HwYetEUXR7Uyc63w98x21G1oM_obqK6WhBo0I5xdvYo\" width=\"657\" height=\"571\"><\/p>\n\n\n\n<ol start=\"2\">\n<li>Navigate to the following Registry Folder: Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\JumpCloud\\AD Sync.<\/li>\n\n\n\n<li>There should be a Key (looks like a folder) named <strong>ldap<\/strong>. If there is not, please create this Key in the registry and name it <kbd>ldap<\/kbd>.<\/li>\n\n\n\n<li>Open the <strong>ldap <\/strong>Key.<\/li>\n<\/ol>\n\n\n\n<p><img decoding=\"async\" alt=\"regedit window.jpg\" src=\"https:\/\/lh7-us.googleusercontent.com\/Psb5PUx2CReG-nUExGQCrT6alm39_mswYm-p5qs0Z4n5DvMNRKRGOo_lKBn44cs9K2NOGa9EYILGXpoweLKlocmriBoYu8oTUOZTLLNOAGHF3k6IvTxR3VyzumCDn9vHNvdUcwHQeom_lBQCWPeLH0U\" width=\"861\" height=\"446\"><\/p>\n\n\n\n<ol start=\"5\">\n<li>You should see a Key labeled user_root_dn. You should also see the value with the targeted Root User Container you specified during install of the AD Sync Agent. If the user_root_dn value does not look correct, you can update it by double-clicking the key and updating the value to match your Root User Container. <\/li>\n\n\n\n<li>Once updated, you need to start the JumpCloud AD integration Sync Agent service within services.msc.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>These changes should coincide with relocating the JumpCloud ADI security group in AD, as well as using the Delegation Wizard to set the associated agent service accounts.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-uninstall-agents-from-ad-servers\">To uninstall agents from AD servers<\/h3>\n\n\n\n<ol>\n<li>Open <strong>Program Files<\/strong>.<\/li>\n\n\n\n<li>Find the program associated with the agent you want to uninstall (JumpCloud AD Import or JumpCloud AD Sync)<\/li>\n\n\n\n<li>Uninstall<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-want-additional-assistance-from-jumpcloud\">Want additional assistance from JumpCloud?<\/h2>\n\n\n\n<p>If you\u2019re having issues with getting JumpCloud\u2019s AD Integration working, see the <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-adi\">Troubleshooting Guide<\/a>.JumpCloud now offers a myriad professional services offerings to assist customers with implementing and configuring JumpCloud. If you\u2019re looking for assistance with Migrating from AD, or to integrate AD with JumpCloud, we recommend you reach out to JumpCloud\u2019s Professional Services team on the following page: <a href=\"https:\/\/jumpcloud.com\/professional-services\">Professional Services – JumpCloud<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The JumpCloud Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between JumpCloud and on-premise or off-premise […]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2954],"support_tag":[],"coauthors":[2839,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Use and Manage the Active Directory Integration (ADI) - JumpCloud<\/title>\n<meta name=\"description\" content=\"Now that the ADI Import and Sync agents have been installed on the domain controller, understand how to utilize the ADI with JumpCloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Use and Manage the Active Directory Integration (ADI)\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-04T20:37:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"19 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration\",\"url\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration\",\"name\":\"Use and Manage the Active Directory Integration (ADI) - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg\",\"datePublished\":\"2023-06-05T17:09:19+00:00\",\"dateModified\":\"2025-03-04T20:37:55+00:00\",\"description\":\"Now that the ADI Import and Sync agents have been installed on the domain controller, understand how to utilize the ADI with JumpCloud.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg\",\"width\":714,\"height\":333},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Use and Manage the Active Directory Integration (ADI)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Use and Manage the Active Directory Integration (ADI) - JumpCloud","description":"Now that the ADI Import and Sync agents have been installed on the domain controller, understand how to utilize the ADI with JumpCloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration","og_locale":"en_US","og_type":"article","og_title":"Use and Manage the Active Directory Integration (ADI)","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration","og_site_name":"JumpCloud","article_modified_time":"2025-03-04T20:37:55+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"19 minutes","Written by":"joyjaswinski, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration","url":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration","name":"Use and Manage the Active Directory Integration (ADI) - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg","datePublished":"2023-06-05T17:09:19+00:00","dateModified":"2025-03-04T20:37:55+00:00","description":"Now that the ADI Import and Sync agents have been installed on the domain controller, understand how to utilize the ADI with JumpCloud.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-single-domain-workflow.jpg","width":714,"height":333},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/use-the-active-directory-integration#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Use and Manage the Active Directory Integration (ADI)"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88897"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88897\/revisions"}],"predecessor-version":[{"id":121821,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88897\/revisions\/121821"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=88897"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=88897"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=88897"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=88897"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}