Import and Sync Users from Active Directory

Hideez Integrations – Import and sync users from AD

Hideez provides two ways to manage employees in Hideez Enterprise Server (HES):

• Manual management: Add and manage employees manually in HES.

• Integration with Active Directory (AD): Sync employees with a specific group in AD.

You can also integrate multiple domains, including Azure AD and on-premises AD.

Steps to Import and Sync Users from Active Directory

Step 1: Configure Active Directory Settings

Ensure your Active Directory settings are correctly configured for integration with HES.

Step 2: Create a Group in AD

• In Active Directory, create a group named Security Key Owners.

• Add all employees to whom you will assign Hideez Keys to this group.

Step 3: Sync with Active Directory

• In HES, click the Sync with AD button.

• Confirm the action by selecting Sync Now.

Note: If you encounter the error "Unavailable Critical Extension" during sync or password update, please follow our troubleshooting guide to enable Enabling Virtual List View.

Step 4: Verify Imported Employees

• Ensure that all employees from the Security Key Owners group appear in the HES employee list.

• Employees imported from AD will have a special icon next to their names and cannot be edited manually (no Edit button will be available).

Note: If a manually added employee shares the same name as an imported one, the AD data will replace the manual entry.

Step 5: Automatic Synchronization

• The employee list will synchronize every hour.

• When a new user is added to the Security Key Owners group, they will appear in HES. Afterward, you can assign them a key and add the necessary accounts.

• When a user is removed from the Security Key Owners group, their key will be deactivated in HES, but they will remain on the employee list. You need to recover the key from the employee, clear it via Hideez Client, and it will be marked as Ready for future use.

Multi-Domain Scenarios

In a multi-domain environment, users from different domains are mapped based on their email addresses. If users from different domains share the same email address, they will be combined into one user profile on the HES server after synchronization.