SailPoint Active Directory connector offers complete management on your active directory infrastructure, which can be distributed across multiple domain/multiple forest. Using this connector you can manage users, contacts, groups, Exchange mailbox, mail users, mail contacts and Skype users from single point.
Support Level: SailPoint Delivered
Connectors developed by SailPoint's Engineering team and supported under annual SailPoint support and maintenance. Reach out to SailPoint support for assistance.
Supported Use Cases
- Full Account Aggregation
- Single Account Aggregation
- Delta Account Aggregation
- Full Entitlement Aggregation
- Full Group Aggregation
- Single Group Aggregation
- Delta Group Aggregation*
- Create Account Provisioning
- Update Account Provisioning
- Delete Account Provisioning*
- Create Group Provisioning*
- Update Group Provisioning*
- Delete Group Provisioning*
- Enable / Disable Account Provisioning
- Unlock Account Provisioning
- Change Account Password
- Add Entitlement(s)
- Remove Entitlement(s)
*This feature is currently supported only with the IdentityIQ platform
Supported Versions
Supported Active Directory Domain Services (AD DS) functional levels
- Microsoft Windows Server 2016
- Microsoft Windows Server 2012R2
- Microsoft Windows Server 2012
- Microsoft Windows Server 2008R2
- Microsoft Windows Server 2008
Note -
- Microsoft Windows Server 2016 is the latest Active Directory functional level supported. Microsoft has not made any changes in the functional level for Active Directory in Microsoft Windows Server 2019 and Microsoft Windows Server 2022. These two versions will also work as it is.
Supported Microsoft Exchange Servers
- Microsoft Exchange Server 2019
- Microsoft Exchange Server 2016
Supported Microsoft Lync\Skype for Business Servers
Related Documentation
IdentityNow
IdentityIQ
Contact Us
SailPoint Support
SailPoint Professional Services