Integrating SailPoint with Active Directory

Revised Date: 27 June 2024

Note

IdentityIQ connector information is now available as online help and PDF. The online help describes the latest updates for the connector.

To find documents related to a specific version of IdentityIQ, refer to the Supported Connectors for IdentityIQ page on Compass.

Configuration details for connectors may vary not only by release version but also by patch version. Be sure to refer to the correct documentation for your specific release and patch level.

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of an Active Directory connector in IdentityIQ.

The SailPoint Active Directory connector offers complete management of your Active Directory infrastructure, which can be distributed across multiple domains/multiple forests. You can manage users, contacts, groups, Exchange mailbox, mail users, mail contacts, and Skype users front a single source.

For more information on what you can do with the Active Directory connector, refer to Supported Features.

  • Exchange management operations with the Active Directory Connector will work with the exchange server where the certificate signing of the PowerShell serialization payload is enabled. Please refer to Certificate signing of PowerShell serialization payload in Exchange Server - Microsoft Support for more information about this feature by Microsoft.

  • The TLS option is enabled by default during creation of new a application to enforce the secure communication over the network.

  • No longer supports Microsoft Exchange Server 2013 and Microsoft Lync Server 2013, as Microsoft has ended support.