---
title: "Active Directory Connector - Installation"
slug: "active-directory-connector-installation"
updated: 2021-02-16T22:00:40Z
published: 2021-02-16T22:00:40Z
canonical: "kb.expedient.com/active-directory-connector-installation"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.expedient.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Active Directory Connector - Installation

Active Directory Connector manages IDM user authentication against Active Directory and provide real-time synchronization.

### Prerequisites

#### System Requirements

- Windows Server* 2012, 2016, or 2019
- Pentium 4 or better, 512MB of RAM, and 120 MB of Disk

**Installation not compatible with FIPS compliance mode*

#### Configuration

- .NET Framework 4.5.1 and up
- Enable directory fallback password cache and enable password mapping (enabled by default)

**We recommend a minimum of 3 Active Directory Connector installations for each Active Directory domain to provide load balancing and failover**

#### DMZ Installation

- Windows Server must be connected to the Domain Controller for ADC installations.
- Active Directory Connector uses only the following network ports for connections to AD:
- TCP 389 – For the ADC to connect to AD using LDAP
- TCP 636 – For the ADC to connect to AD using LDAPS
- TCP/UDP port 53 for DNS connections

---

### Install Active Directory Connector 5

#### Run the Active Directory Connector Wizard

1. As an admin, go to **Users** > **Directories**, and click **New**.

2. On the **Select a Directory Type** page, choose **Active Directory** from the list of available directory types.

3. In Section A, name your directory.

4. In Section B, click **Download AD Connector Version** to download the installer file.

See OneLogin's [ADC Release Notes](https://apps.onelogin.com/onelogin-downloads/adc/5_1_0_66/ReleaseNotes.txt)

![](https://cdn.document360.io/69e9f9c7-5da8-45e7-a671-4b8287f36122/Images/Documentation/image-1613511200185.png)

5. Copy the installation token and enter it, when prompted, during the Active Directory Connector install.

#### Installation

Install the connector on a server on the same network as your Active Directory service.

*It is highly recommended to install the Active Directory Connector on a member server machine in the same physical network as the DC.

#### Download the Active Directory Connector Installer

1. Sign in as a domain administrator on the machine that will host your Active Directory Connector.

2. Run the Active Directory Connector installer that you previously downloaded.

3. Click **Next**, on the **Welcome** page and accept the license terms on the **End-User License Agreement Page.**

4. On the **Connector Token** dialog, paste the token you copied from the Active Directory Setup wizard.

![](https://cdn.document360.io/69e9f9c7-5da8-45e7-a671-4b8287f36122/Images/Documentation/image-1613511284741.png)

5. On the Service Log On Credentials page, provide the domain and account used to run the Active Directory Connector.

![](https://cdn.document360.io/69e9f9c7-5da8-45e7-a671-4b8287f36122/Images/Documentation/image-1613510987036.png)

6. Select the appropriate options, depending on your current system setup:

- Upgrading an existing Active Directory Connector - select "Use existing OneLogin Service Account"
- No ADC has been installed on this machine - select "Create a OneLogin Service Account"
  - *If you want to use an existing domain service account, select "Run service as" and enter the domain and account used to run the Active Directory Connector.*
  - *Must be a domain service account*

7. On the **Select Port for Desktop SSO** dialog, provide the port used for Desktop SSO (typically 8080 or 443 for multiple load-balanced ADCs)

![](https://cdn.document360.io/69e9f9c7-5da8-45e7-a671-4b8287f36122/Images/Documentation/image-1613510987085.png)

8. Select your country (US or EU) then click Install.

When the installation is complete, you have the option to launch the Domain Configuration wizard, which enables you to select the domains that the Active Directory Connector syncs with IDM.

You can run the Domain Configuration Wizard at any time by launching `ADConfigWizard` from the Active Directory Connector installation directory.

9. After the install, you will be prompted to import ysers.

- Select the OUs and/or Domains you wish to synchronize with. Click **Finish**.
- To initialize the first synchronization click on the **More Actions** menu and select **Synchronize Users**.

Users automatically sync from Active Directory to IDM when they're created or updated in Active Directory.

---

#### Next: Configure the Active Directory Connector

**Further Reference**

KB Article: [Automated AD Connector Notifications](/v1/docs/active-directory-connector-automated-notifications)

External Site: [OneLogin Knowledge Base](https://onelogin.service-now.com/support/?id=kb_view2)[](https://onelogin.service-now.com/support/?id=kb_view2)