{"pageModel":{"attributes":{"id":"","name":"118953.dita","viewName":"DitaDetail"},"elements":{"ditaContent":{"name":"DITAContent","value":"
\r\n

Provision Users, Groups, and Endpoint Devices from Active Directory

\r\n
\r\n

Provisioning users, groups, and endpoint devices from Active Directory (AD) to Cisco Secure Access requires the deployment of a Cisco AD Connector in your environment. The AD Connector securely retrieves non-sensitive user, group, and device information from your instance of Microsoft AD and integrates the identities with Secure Access. Once your users, groups, and devices are provisioned in Secure Access, you can create and enforce AD group or device-based Access rules and view AD user-based reports.

\r\n
\r\n

Next Steps

\r\n
    \r\n
  1. Review the requirements for setting up the AD components and Cisco AD Connector in your environment. For more information, see Prerequisites for AD Connectors.
    2. \r\n
  2. Review how to connect multiple AD domains. For more information, see Connect Multiple Active Directory Domains.
    3. \r\n
  3. Manage the AD components with Secure Access. For more information, see Manage AD Components.
    4. \r\n
  4. Manage the AD Connectors. For more information, see Manage AD Connectors.
    5. \r\n
  5. View the installed AD components. For more information, see View AD Components in Secure Access.
    6. \r\n
  6. Enable or disable DLP email notifications for reporting managers. For more information,\r\n see Synchronize Active Directory\r\n Reporting Manager Email Addresses for DLP Notifications.
    7. \r\n
  7. Troubleshoot the AD deployments. For more information, see AD Connector Communication Flow and Troubleshooting.
    8. \r\n
\r\n
\r\n
\r\n
\r\n","ditaVal":"","format":"html"},"bookTitle":{"value":""},"shortDescription":{"value":""}}},"parameters":{"appId":"SecureAccess","topicAlias":"provision-users-and-groups-from-active-directory"}}