{"id":97088,"date":"2023-10-26T04:02:48","date_gmt":"2023-10-26T08:02:48","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=97088"},"modified":"2025-03-18T12:57:28","modified_gmt":"2025-03-18T16:57:28","slug":"configure-adi-sync-from-ad-to-jumpcloud","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud","title":{"rendered":"Configure ADI: Manage users, security groups, and passwords in AD"},"content":{"rendered":"\n<p>The 探花大神 Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between 探花大神 and on-premise or off-premise AD. As covered in <a href=\"https:\/\/jumpcloud.com\/support\/get-started-adi\" target=\"_blank\" rel=\"noreferrer noopener\">Get Started: Active Directory Integration<\/a>, the ADI uses two agents: an Import Agent and a Sync Agent that can be installed in three (3) configurations which are based on where you want to manage users, groups, and passwords.<\/p>\n\n\n\n<ol>\n<li>Manage users, groups, and passwords in AD.<\/li>\n\n\n\n<li>Manage users and passwords in AD, 探花大神, or both.<\/li>\n\n\n\n<li>Manage users, groups, and passwords in 探花大神.<\/li>\n<\/ol>\n\n\n\n<p>This article provides a step-by-step guide for configuring ADI to manage users, security groups, and passwords in AD.&nbsp;This configuration is typically used when you want to extend AD to the cloud for additional functionality, plan to keep AD as your primary user, group, and password authority, and want minimal changes to your existing AD environment.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-deployment-configuration-overview\">Deployment <strong>Configuration<\/strong> Overview<\/h2>\n\n\n\n<ul>\n<li>Use ADI import agent only.<\/li>\n\n\n\n<li>Install import agent on all domain controllers (DCs) or on at least 2 member servers.<\/li>\n\n\n\n<li>Add users and security groups under the ADI security group in AD.<\/li>\n<\/ul>\n\n\n\n<p>To explore the use cases and benefits of this configuration, see <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\">Manage users, groups, and passwords in AD<\/a> in the <a href=\"https:\/\/jumpcloud.com\/support\/configure-the-active-directory-integration\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Active Directory Integration (ADI)<\/a> help center article.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-workflows\"><strong>Workflows<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-ad-import-agent-only-single-domain-workflow\"><strong>AD Import Agent Only \u2013 Single Domain Workflow<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"726\" height=\"332\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg\" alt=\"\" class=\"wp-image-101618\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg 726w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow-300x137.jpg 300w\" sizes=\"(max-width: 726px) 100vw, 726px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-ad-import-agent-only-multiple-domain-workflow\"><strong>AD Import Agent Only \u2013 Multiple Domain Workflow<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"698\" height=\"566\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100171\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow.jpg 698w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/AD-Import-multiple-domain-workflow-300x243.jpg 300w\" sizes=\"(max-width: 698px) 100vw, 698px\" \/><\/figure>\n\n\n\n<p>To learn more about the general user identity workflow and expected behavior for any user, group, and password change in AD and in 探花大神 read <a href=\"https:\/\/jumpcloud.com\/support\/use-the-Active-Directory-Integration\" target=\"_blank\" rel=\"noreferrer noopener\">Use and Manage the Active Directory Integration (ADI)<\/a> .&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-system-requirements\"><strong>System Requirements<\/strong><\/h2>\n\n\n\n<ul>\n<li>64-bit Windows Server (versions 2012, 2016, 2019, 2022)\n<ul>\n<li>Server Core installation is also supported for Windows Server versions 2016, 2019, and 2022. You will need to include the&nbsp;<strong>\/msiexec<\/strong>&nbsp;parameter when running the agent installer<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>15MB disk space<\/li>\n\n\n\n<li>10MB RAM<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">New Installation Overview<\/h2>\n\n\n\n<p>The main steps you will take to install and configure ADI for a one-way sync from AD to 探花大神 are:<\/p>\n\n\n\n<ol>\n<li>Determine on which servers the AD import agents will be installed: member servers or domain controllers (DCs).<\/li>\n\n\n\n<li>Complete the prerequisite checklist.<\/li>\n\n\n\n<li>Determine the Root User Container in AD.&nbsp;<\/li>\n\n\n\n<li>Create the 探花大神 ADI Integration Security Group in AD.<\/li>\n\n\n\n<li>Create the AD Import Service Account.<\/li>\n\n\n\n<li>Delegate read-only control for the 探花大神 import account.<\/li>\n\n\n\n<li>Create an ADI domain instance in 探花大神.<\/li>\n\n\n\n<li>Select your configuration and follow the installation steps and download the import agent<\/li>\n\n\n\n<li>Run the the AD Import Agent installation wizard<\/li>\n\n\n\n<li>Reboot the servers on which the agent was installed.<\/li>\n\n\n\n<li>Verify the Import Agent Service started on each AD server.<\/li>\n\n\n\n<li>Complete post-installation AD import agent configuration on each AD server.<\/li>\n\n\n\n<li>Verify the AD import.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-considerations\"><strong>Considerations<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-agent-version-considerations\">Agent Version Considerations<\/h3>\n\n\n\n<ul>\n<li>As of import agent v2.2.1, the following changes were made:\n<ul>\n<li>The default location for all agent related installation, configuration, and log files is C:\\Program Files\\探花大神\\AD Integration.<\/li>\n\n\n\n<li>All references to AD Bridge changed to AD Import.<\/li>\n\n\n\n<li>The jcimport username &amp; password and the API key are stored in the registry instead of the ADI Import Agent configuration file. Both the password and API key are encrypted and the values in the registry are replaced with the encrypted value when the import agent starts.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Import agent v3.0.0 and higher supports delegated user authentication to AD.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-delegated-authentication-considerations\">Delegated Authentication Considerations<\/h3>\n\n\n\n<p>Review <a href=\"https:\/\/jumpcloud.com\/support\/adi-use-ad-delegated-authentication\">ADI: Use AD Delegated Authentication<\/a> for specific considerations and more information about delegated authentication to AD.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>When the delegated authentication setting,&nbsp;<strong>Delegated Password Validation<\/strong>, is enabled and <strong>Pending<\/strong> for the ADI configuration and the user&#8217;s<strong> Delegated Authority<\/strong> is <strong>Active Directory<\/strong>, the user will not be able to log in. An AD import agent, version 3.0 or higher, must be installed and active to change the status of <strong>Delegated Password Validation<\/strong> from <strong>Pending<\/strong> to <strong>Active<\/strong>. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<ul>\n<li>When upgrading from AD import agent v2.6.0 or lower, you must select <strong>Install New Agent<\/strong> from the Downloads dropdown menu in the ADI Details page to get the connect key, which is required to complete the upgrade of the agent on the AD server.<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>When upgrading the AD import agent to version 3.0, existing users connected to the domain will not have their log in delegated to AD unless the <strong>Delegated Authority<\/strong> is manually set to <strong>Active Directory<\/strong> for those existing users.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>The delegated authentication setting, <strong>Delegated Password Validation<\/strong>, is enabled by default for this ADI configuration and cannot be disabled.<\/li>\n\n\n\n<li>When the delegated authentication setting,&nbsp;<strong>Delegated Password Validation<\/strong>, is enabled and active: \n<ul>\n<li>All users imported by import agent v3.0.0 or higher will have their <strong>Delegated Authority<\/strong> automatically set to <strong>Active Directory<\/strong> and their login to the 探花大神 User Portal and SSO login delegated to AD for validation.<\/li>\n\n\n\n<li>Existing AD users imported from AD to 探花大神 no longer have to reset their password in AD to log in to 探花大神 managed resources when delegation is enabled for them.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">General Installation Considerations<\/h3>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>All installed import agents should be the same version to avoid unexpected behavior or the potential for users not being able to log in if the primary agent is switched.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>Non-standard ASCII characters are not supported in the Root User DN.<\/li>\n\n\n\n<li>When upgrading an import agent, the installation wizard prompts for minimal information:\n<ul>\n<li>Agent connect key, when upgrading from import agent v2.6.0 or lower.<\/li>\n\n\n\n<li>Directory for where the installation should occur.<\/li>\n\n\n\n<li>Finish screen.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The Connect Key will expire in 7 days if it is not used.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>Demoting a DC installation to a member server and promoting a member server installation to a DC aren\u2019t supported.&nbsp; The agent(s) must be uninstalled first and then installed on the other type of server.<\/li>\n\n\n\n<li>A reinstall of the same ADI import agent is treated as an update.<\/li>\n\n\n\n<li>User passwords must be managed in AD.<\/li>\n\n\n\n<li>Users who are imported from AD to 探花大神 will automatically have their <strong>Password Authority<\/strong> set to <strong>Active Directory<\/strong> by default and the attributes that sync will be read-only in both the Admin Portal and in User Portal. These fields become restrictedFields.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-member-server-installation-considerations\">Member Server Installation Considerations<\/h3>\n\n\n\n<p>The following are considerations only if you choose to install the import agents on member servers:<\/p>\n\n\n\n<ul>\n<li>The AD password <strong>does<\/strong> <strong>NOT<\/strong> sync from AD to 探花大神. Users imported and synced from AD will not have a password in 探花大神.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-domain-controller-dc-installation-considerations\">Domain Controller (DC) Installation Considerations<\/h3>\n\n\n\n<p>The following are considerations only if you choose to install the import agents on DCs:<\/p>\n\n\n\n<ul>\n<li>An import agent must be installed on <strong><em>all<\/em><\/strong> Domain Controllers.&nbsp;<\/li>\n\n\n\n<li>Downtime should be scheduled. The installation requires a server reboot.<\/li>\n\n\n\n<li>AD passwords <strong>will<\/strong> sync from AD to 探花大神. This means that the password will be managed in AD and stored in both AD and 探花大神.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Security Considerations<\/h3>\n\n\n\n<ul>\n<li>We STRONGLY recommend <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">installing and using LDAPS<\/a> for the ADI. Configuring and using LDAPS on the Domain Controller that the Jumpcloud ADI agents will connect to secures any sensitive information that is exchanged between the Jumpcloud agents and the Domain Controller and protects against malicious users.<\/li>\n\n\n\n<li>We recommend periodically rotating the password for the server account used by the integration (e.g., <strong>jcimport<\/strong>)for security reasons.<\/li>\n\n\n\n<li>API tokens are specific to each Admin account. Use a separate, dedicated account for this integration to prevent the possibility of breaking the ADI connectivity to your 探花大神 organization when an Admin account is deleted.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>If the 探花大神 Administrator Account associated with the import is deleted or the API key is rotated, the import will stop working.  All imports will fail until a valid API key is generated and updated in the registry on the AD servers.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Password Considerations<\/h3>\n\n\n\n<ul>\n<li>Users imported and synced from AD to 探花大神 will have their <strong>Password Authority<\/strong> set to <strong>Active Directory<\/strong>, which means a password cannot be created or changed in 探花大神 by either a 探花大神 Admin or an end-user. The password can only be created and updated in AD.<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>When the 探花大神 AD import agent is installed on <strong>member servers<\/strong>, the AD password <strong>does NOT <\/strong>sync to 探花大神. The password will only be in AD.\n<ul>\n<li>In this configuration, the user\u2019s <strong>Password Authority<\/strong> should also be set to <strong>Active Directory<\/strong> to prevent a password from being entered in 探花大神 by either a 探花大神 Admin or the end user.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>When the 探花大神 AD import agent is installed on <strong>all DCs<\/strong>, the AD password <strong>does<\/strong> sync from AD to 探花大神. This means that the password will be saved in both AD and 探花大神. \n<ul>\n<li>When passwords are imported and synced from AD to 探花大神:\n<ul>\n<li>Passwords are still managed in AD.<\/li>\n\n\n\n<li>Password complexity requirements in AD and 探花大神 should be as closely aligned as possible to avoid passwords being rejected and failing to sync due to not meeting the complexity requirements.<\/li>\n\n\n\n<li>If you set a password expiration policy in 探花大神, these users will not receive password expiration notifications automatically.<\/li>\n\n\n\n<li>Sending password expiration notifications from 探花大神 is not recommended. You can send notifications manually by going to<strong> users \u00bb select expiring users \u00bb resend email<\/strong>.<\/li>\n\n\n\n<li>Users with their password authority set to Active Directory managed by AD are restricted from changing their password in 探花大神, with the exception of the link from the password expiration notification.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>If the import agent is <strong>installed on DCs<\/strong>, the <strong>password is stored<\/strong> in 探花大神 after the initial log in. The stored password continues to be synced from AD to 探花大神 and from 探花大神 to other resources. The password can be used to log in to resources that don\u2019t support delegated authentication to AD, such as Cloud RADIUS, Cloud LDAP, and devices.<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>If the import agent is <strong>installed on AD member servers<\/strong>, the <strong>password is never stored <\/strong>in 探花大神.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-import-considerations\">Import Considerations<\/h3>\n\n\n\n<ul>\n<li>We recommend that all users you plan to import from AD into 探花大神 live in a single OU or be nested underneath a chosen OU (Root user container) in AD. This can be the default CN=Users container in AD or an alternate custom OU in the directory\n<ul>\n<li>If you relocate users in AD outside of the Root User Container, you could disrupt password synchronization, or remove users and groups from your 探花大神 instance, along with any associated data and resource associations<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The 探花大神 ADI import agent services use TLS for all communication. If no network connectivity exists to 探花大神, the ADI will fail to sync and will not work properly.<\/li>\n\n\n\n<li>Users must have values for &lt;First Name&gt; and &lt;Last Name&gt;, i.e., the first name and last name fields cannot be empty, &nbsp;otherwise the users will fail to sync from AD to 探花大神.<\/li>\n\n\n\n<li>When multiple AD import agents are installed, one is designated as the primary agent by the ADI service for all user, group, delegated authentication, and password related actions (directives) performed by the import agent. If the primary import agent becomes unavailable, another active import agent is automatically designated as the primary.<\/li>\n\n\n\n<li>Users who are imported from AD to 探花大神 will automatically have their <strong>Password Authority<\/strong> set to <strong>Active Directory<\/strong> by default and the attributes that sync will be read-only in both the Admin Portal and in User Portal. These fields become restrictedFields.\n<ul>\n<li>The <strong>Password Authority<\/strong> setting can be changed for a specific user from their user record directly or for multiple users from <strong>Users<\/strong> &gt;<strong>More Actions<\/strong>&gt;<strong>Set External Password Authority<\/strong>. <\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>To enable successful AD user imports, you must ensure that <strong>User Settings &gt; Default Password Authority<\/strong> is set to <strong>None (探花大神)<\/strong> <\/li>\n\n\n\n<li>You can manage users in 2 ways:\n<ul>\n<li>Individually by adding them to the security group created for this integration, located in the designated OU&nbsp;<\/li>\n\n\n\n<li>Using groups located in or nested in the designated Root user container by adding those groups as a member of the 探花大神 Integration Security Group.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>ADI Import Agent settings in the <strong>jcadimportagent.config.json<\/strong> file control the behaviors that occur in 探花大神 when certain actions are taken on the user in AD.\n<ul>\n<li>Removing users from the 探花大神 integration Security Group within AD will either delete those users in 探花大神 and deprovision them from all bound resources or disconnect them from the AD integration, leaving them active in 探花大神 and allowing them to be managed in 探花大神 directly. The behavior is controlled by the UserDissociationAction setting in AD Import Agent configuration file.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Importing <a href=\"https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx\" target=\"_blank\" rel=\"noreferrer noopener\">privileged user accounts<\/a>, such as Domain Admins and accounts with \u201cadminCount=1\u201d, into 探花大神 from AD or managing them in AD from 探花大神, isn\u2019t supported. <\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-attributes\">Attributes<\/h2>\n\n\n\n<p>The user attributes that sync from AD to 探花大神 are:<\/p>\n\n\n\n<ul id=\"block-574e89ae-3346-43d1-b1c7-a6a49e5a890d\">\n<li>First Name<\/li>\n\n\n\n<li>Last Name<\/li>\n\n\n\n<li>Username<\/li>\n\n\n\n<li>Email<\/li>\n<\/ul>\n\n\n\n<p>If the&nbsp;<strong>SyncAdditionalAttributes<\/strong>&nbsp;setting is&nbsp;<strong>true<\/strong>&nbsp;in the&nbsp;<kbd>jcadimportagent.config.json<\/kbd>&nbsp;file, the following attributes are also updated:<\/p>\n\n\n\n<ul>\n<li>displayname<\/li>\n\n\n\n<li>description<\/li>\n\n\n\n<li>JobTitle<\/li>\n\n\n\n<li>department<\/li>\n\n\n\n<li>company<\/li>\n\n\n\n<li>location<\/li>\n\n\n\n<li>employeeType<\/li>\n\n\n\n<li>phoneNumbers<\/li>\n\n\n\n<li>addresses<\/li>\n\n\n\n<li>manager&nbsp;<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>These attributes become read-only (restrictedFields) in 探花大神 when a user&#8217;s <strong>Password Authority<\/strong> is set to <strong>Active Directory<\/strong>. The <strong>Password Authority<\/strong> setting can be changed for a specific user from their user record directly or for multiple users from <strong>Users<\/strong> &gt;<strong>More Actions<\/strong>&gt;<strong>Set External Password Authority<\/strong>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prerequisite-checklist-for-new-installations\">Prerequisite Checklist for New Installations<\/h2>\n\n\n\n<p>Before installing the ADI import agents for the first time, complete the following checklist<\/p>\n\n\n\n<ol>\n<li>Know your AD Domain Admin credentials.<\/li>\n\n\n\n<li>Decide whether you want to install the sync agents on your AD domain\u2019s non-DC Domain Member Servers (member servers) or Domain Controllers (DCs).\n<ul>\n<li>When installing the <strong>import agent on DCs<\/strong>, <strong>schedule downtime. <\/strong>Installation requires server reboot!&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Verify you have access to <em>all<\/em> Domain Controllers (DCs) in the AD domain or to the member servers on which you plan to install the import agents.<\/li>\n\n\n\n<li>Ensure the servers on which you are installing the import agent are running on a 探花大神 supported 64-bit Windows Server version (2012, 2016, 2019, 2022).<\/li>\n\n\n\n<li>Confirm the servers on which you are installing the import agent have networking access to the internet and are able to communicate outbound to console.jumpcloud.com over HTTPS port 443.&nbsp;<\/li>\n\n\n\n<li>If installing the import agents on DCs, schedule Downtime \u2013 installation requires a server reboot!<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/manage-admin-accounts#creating-jumpcloud-administrators\">Create a dedicated Administrator account<\/a> in 探花大神 that is specifically for the ADI.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>API tokens are specific to each Admin account. Create a dedicated account for this integration to prevent the possibility of breaking the ADI connectivity to your 探花大神 organization when an Admin account is deleted.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-apis\">Generate and securely store the API key<\/a> for the ADI dedicated Administration account.<\/li>\n\n\n\n<li>Verify all users to be synced from AD to 探花大神 have a value for first name and last name in AD.<\/li>\n\n\n\n<li>If you install the import agents on DCs, align password complexity requirements between AD and 探花大神 as closely as possible. Otherwise, passwords may not replicate if they\u2019re rejected by the destination directory\u2019s complexity requirements.<\/li>\n\n\n\n<li>[<strong>Recommended<\/strong>] Verify all users you plan to import into 探花大神 live in a single OU or are nested underneath a chosen OU (Root user container) in AD. This can be the default CN=Users container in AD or an alternate custom OU in the directory.&nbsp;<\/li>\n\n\n\n<li>Review <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for the Active Directory Import Agent<\/a> to understand the configuration settings available for the import agent and note any default values that need to be changed as part of the installation.&nbsp;<\/li>\n\n\n\n<li>[<strong>STRONGLY recommended<\/strong>] <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">Install LDAPS<\/a>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>We <strong>STRONGLY<\/strong> recommend <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">installing and using LDAPS<\/a> for the ADI. Configuring and using LDAPS on the Domain Controller that the Jumpcloud ADI agents will connect to secures any sensitive information that is exchanged between the Jumpcloud agents and the Domain Controller and protects against malicious users.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prepare-ad-for-the-import-agent-installations\">Prepare AD for the Import Agent Installations<\/h2>\n\n\n\n<p>To import and update user identities, attributes, and user groups from AD into 探花大神, you&#8217;ll need to install a 探花大神 AD import agent on your non-DC Domain Member Servers (member servers) or <em>all<\/em> Domain Controllers (DCs) within your domain.&nbsp; Complete the steps below to prepare for installing the agents on your servers.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Passwords can only be synced from AD to 探花大神 if the import agent is installed on a DC. When installing on DCs, an import agent must be installed on <em><strong>all<\/strong><\/em> DCs.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-prepare-for-the-ad-import-agent-installation-in-ad\"><strong>Prepare for the AD Import Agent Installation in AD<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The steps outlined below must be done on a DC, even if you plan to install the import agents on member servers. A server reboot is <strong>NOT<\/strong> required after completing these changes.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-determine-the-root-user-container-in-ad\"><strong>Determine the Root User Container in AD<\/strong><\/h4>\n\n\n\n<p>The 探花大神 AD Import agent is designed to integrate with AD\u2019s default \u2018Users\u2019 container (CN=Users) which is pre-populated in the AD Users and Computers (ADUC) interface and labeled as \u201cUsers\u201d as shown in the following image. (This is a default domain with no custom containers. In this use-case the Root Container is CN=Users;DC=example;DC=com).<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/support.jumpcloud.com\/servlet\/rtaImage?eid=ka06S000001Yuic&amp;feoid=00N1M00000F5H4z&amp;refid=0EM6S000003YywK\" alt=\"\" \/><\/figure>\n\n\n\n<p>The import agent installation wizard assumes that this is the Root User container and uses this path in your AD Import agent configuration file. During installation, you\u2019re prompted for the domain components (DC) used in your AD Domain (i.e., DC=example;DC=com). The installation wizard uses this base level domain information to construct the following Root user container DN (Distinguished Name).<\/p>\n\n\n\n<p>EXAMPLE: CN=Users;DC=example;DC=com<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If CN=Users isn\u2019t the Root User Container you want to use in your AD instance, you can update the path in the agent configuration file, \u2018jcadimportagent.config.json\u2019, after the AD Import agent install completes. This is covered after the installation section of this document.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-create-the-jumpcloud-adi-integration-security-group-in-ad\"><strong>Create the 探花大神 ADI Integration Security Group in AD<\/strong><\/h4>\n\n\n\n<p>A Security Group for the integration must be created within the Root User Container you\u2019ve defined in the previous step. This Security Group is required. Any member of this group will be exported to your 探花大神 tenant.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>If you do not create this group or give it a unique name across domains, the ADI will fail to function properly.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol>\n<li>Open the ADUC Menu by clicking <strong>Start<\/strong>, typing <kbd>dsa <\/kbd>and clicking the <strong>Active Directory Users and Computers<\/strong> icon. <img decoding=\"async\" width=\"467\" height=\"87\" class=\"wp-image-81153\" style=\"width: 300px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/active-directory-users-computers.jpeg\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/active-directory-users-computers.jpeg 467w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/active-directory-users-computers-300x56.jpeg 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/li>\n\n\n\n<li>Find your Root User Container.<\/li>\n\n\n\n<li>Right Click on the Root User Container\u2019s folder and select <strong>New &gt; Group<\/strong>.\n<ul>\n<li>Ensure the Security Group is a Global Security Group.<\/li>\n\n\n\n<li>Give the Security Group a name that helps identify it as the group used by the ADI (e.g., \u201c探花大神\u201d for single domain environments, \u201c探花大神 (Domain)\u201d for multi-domain environments).<\/li>\n\n\n\n<li>Click OK.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>In multi-domain environments, the security group must have a unique name within each domain (e.g., \u201c探花大神 (mydomain1)\u201d and \u201c探花大神 (mydomain2)\u201d).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"565\" height=\"527\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/create-ADI-group-in-AD.jpg\" alt=\"\" class=\"wp-image-100268\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/create-ADI-group-in-AD.jpg 565w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/create-ADI-group-in-AD-300x280.jpg 300w\" sizes=\"(max-width: 565px) 100vw, 565px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-create-the-ad-import-service-account\"><strong>Create the AD Import Service Account<\/strong><\/h4>\n\n\n\n<ol>\n<li>Open the ADUC Menu by clicking <strong>Start<\/strong>, typing <kbd>dsa <\/kbd>and clicking the <strong>Active Directory Users and Computers<\/strong> icon. <img decoding=\"async\" width=\"467\" height=\"87\" class=\"wp-image-81153\" style=\"width: 300px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/active-directory-users-computers.jpeg\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/active-directory-users-computers.jpeg 467w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/active-directory-users-computers-300x56.jpeg 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/li>\n\n\n\n<li>Find your Root User Container.<\/li>\n\n\n\n<li>Right Click on the Root User Container\u2019s folder and select <strong>New &gt; User<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>This user cannot:<\/p>\n\n\n\n<ul>\n<li>Be a Domain Administrator<\/li>\n\n\n\n<li>Be a member of the 探花大神 integration security group<\/li>\n\n\n\n<li>Have the username of \u201c探花大神\u201d<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"4\">\n<li>Enter the following values for the 探花大神 Import Service Account user:\n<ul>\n<li>First Name: <kbd>探花大神<\/kbd><\/li>\n\n\n\n<li>Last Name <kbd>Import<\/kbd><\/li>\n\n\n\n<li>User logon name: <kbd>jcimport<\/kbd><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Use <kbd>jcimport <\/kbd>to distinguish what this user is for and to which agent it is attached.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The user logon name cannot be \u201c探花大神\u201d.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"608\" height=\"527\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/create-jcimport-account.jpg\" alt=\"\" class=\"wp-image-100271\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/create-jcimport-account.jpg 608w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/create-jcimport-account-300x260.jpg 300w\" sizes=\"(max-width: 608px) 100vw, 608px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Enter a password for the jcimport user and ensure that it is set to Never Expire since this will be a service account for the Import Agent.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This password should still be rotated periodically for security reasons.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-delegate-read-only-control-for-the-jumpcloud-import-account\"><strong>Delegate read-only control for the 探花大神 import account<\/strong><\/h4>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If you plan to modify your Root user container DN, you need to do this step on that chosen container in your AD<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol>\n<li>Navigate to the Root User Container in ADUC that you have selected, right-click the container and select <strong>Delegate Control<\/strong>. This launches the Delegation of Control Wizard.<\/li>\n\n\n\n<li>Click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>Add the 探花大神 Import Agent account to the Delegation of Control Wizard.&nbsp;<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"644\" height=\"501\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/delegate-control-to-jcimport.jpg\" alt=\"\" class=\"wp-image-100272\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/delegate-control-to-jcimport.jpg 644w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/delegate-control-to-jcimport-300x233.jpg 300w\" sizes=\"(max-width: 644px) 100vw, 644px\" \/><\/figure>\n\n\n\n<ol start=\"4\">\n<li>Click <strong>Next<\/strong>, then select <strong>Read all user information<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"657\" height=\"515\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/ADI-Read-all-user-information-modal.jpg\" alt=\"\" class=\"wp-image-100336\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/ADI-Read-all-user-information-modal.jpg 657w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/ADI-Read-all-user-information-modal-300x235.jpg 300w\" sizes=\"(max-width: 657px) 100vw, 657px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Click <strong>Next<\/strong>, then click <strong>Finish <\/strong>at the final screen.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-install-the-ad-import-agent\"><strong>Install the AD Import Agent<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-create-an-adi-domain-instance-in-jumpcloud\"><strong>Create an ADI domain instance in 探花大神<\/strong><\/h3>\n\n\n\n<p>Create a new ADI domain instance in 探花大神 if one does not already exist<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\" target=\"_blank\" rel=\"noreferrer noopener\">探花大神 Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Directory Integrations &gt; Active Directory<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"642\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/adi-instance.jpg\" alt=\"\" class=\"wp-image-100618\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance-300x188.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance-768x482.jpg 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"3\">\n<li>Click ( <strong>+ Add ADI Domain<\/strong> )<\/li>\n\n\n\n<li>Select <strong>Manage users and passwords in Active Directory<\/strong>. <\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" width=\"1024\" height=\"511\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1024x511.png\" alt=\"\" class=\"wp-image-114557\" style=\"width:908px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1024x511.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-300x150.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-768x383.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1536x766.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb.png 1922w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n<ol start=\"5\">\n<li>Enter the name of an Active Directory domain that you want to integrate with your 探花大神 tenant. For example, \u201cDC=example;DC=com\u201d.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>The \u201cDC\u201d must be in capital letters. Each value must be separated with a semicolon (<strong>;<\/strong>) not a comma. There should be no spaces. The domain case must be the same as it is in the AD import configuration file.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"1284\" height=\"762\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b.png\" alt=\"\" class=\"wp-image-114558\" style=\"width:938px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b.png 1284w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-300x178.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-1024x608.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-768x456.png 768w\" sizes=\"(max-width: 1284px) 100vw, 1284px\" \/><\/figure><\/div>\n\n\n<ol start=\"6\">\n<li>Click <strong>Save<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Download Import Agent<\/strong>.<\/li>\n\n\n\n<li>The Import Agent installer will automatically save to your local <strong>Downloads <\/strong>folder.<\/li>\n\n\n\n<li>After downloading the agent, note and store the 3 values needed for the agent installation:\n<ul>\n<li>Your 探花大神 Organization ID<\/li>\n\n\n\n<li>Your Import Agent Connect Key<\/li>\n\n\n\n<li>The API key for the dedicated admin account for the integration<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Copy and securely store the values for later use.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"1407\" height=\"874\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/New-ADI-domain_2way-Step2_ImportAgentDownload.png\" alt=\"\" class=\"wp-image-114697\" style=\"width:987px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/New-ADI-domain_2way-Step2_ImportAgentDownload.png 1407w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/New-ADI-domain_2way-Step2_ImportAgentDownload-300x186.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/New-ADI-domain_2way-Step2_ImportAgentDownload-1024x636.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/New-ADI-domain_2way-Step2_ImportAgentDownload-768x477.png 768w\" sizes=\"(max-width: 1407px) 100vw, 1407px\" \/><\/figure><\/div>\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The Connect Key will expire in 7 days if it is not used.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If you already generated an API key but didn\u2019t store it, you will need to regenerate it.&nbsp;Regenerating an API key will break any currently installed import agents and all other integrations using that API key.&nbsp;Be cautious with this option.&nbsp;See <a href=\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\">Rotate the Active Directory Import API Key<\/a> for more information.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"11\">\n<li>Save the downloaded installer to the AD servers.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-configure-default-external-password-authority\"><strong>Configure Default External Password Authority<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the\u00a0<a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">探花大神 Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Users &gt; Settings<\/strong>.<\/li>\n\n\n\n<li>Under the <strong>Default External Password Authority<\/strong> &gt; <strong>Password Authority<\/strong>, select <strong>None (探花大神)<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-install-the-ad-import-agent-on-your-ad-servers\"><strong>Install the AD Import Agent on your AD Servers<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If you are installing the import agent on your DCs, an agent must be installed on <strong>all<\/strong> of the write capable DCs within the domain. This does not apply to Read-Only DCs (RODCs).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-run-the-ad-import-agent-installation-wizard\"><strong>Run the AD Import Agent Installation Wizard <\/strong><\/h3>\n\n\n\n<p>Now you are ready to install the 探花大神 AD import agent.&nbsp;<\/p>\n\n\n\n<ol>\n<li>Browse to where you saved the AD Import installer file on your DC.&nbsp;<\/li>\n\n\n\n<li>Right-click the file, then select <strong>Run as administrator<\/strong>.<\/li>\n\n\n\n<li>The Install Wizard will start and prompt you to agree to the&nbsp;C++ license terms and conditions.<br><img decoding=\"async\" width=\"425\" height=\"262\" class=\"wp-image-100349\" style=\"width: 500px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-3.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-3.png 425w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-3-300x185.png 300w\" sizes=\"(max-width: 425px) 100vw, 425px\" \/><\/li>\n<\/ol>\n\n\n\n<ol start=\"4\">\n<li>Select your Server Type and click <strong>Next.<\/strong><br><img decoding=\"async\" width=\"619\" height=\"474\" class=\"wp-image-114312\" style=\"width: 500px;border:black solid 1px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1_ServerType.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1_ServerType.png 619w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1_ServerType-300x230.png 300w\" sizes=\"(max-width: 619px) 100vw, 619px\" \/><\/li>\n<\/ol>\n\n\n\n<ol start=\"5\">\n<li>If you selected <strong>Domain Controller<\/strong>, skip to step 9.<\/li>\n\n\n\n<li>If you selected <strong>Member Server<\/strong> for the server type, provide the FQDN or IP address for that server.&nbsp;We recommend using FQDN.<br><img decoding=\"async\" width=\"619\" height=\"474\" class=\"wp-image-114314\" style=\"width: 500px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A1_FQDN-for-DC.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A1_FQDN-for-DC.png 619w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A1_FQDN-for-DC-300x230.png 300w\" sizes=\"(max-width: 619px) 100vw, 619px\" \/><br><img decoding=\"async\" width=\"619\" height=\"474\" class=\"wp-image-114315\" style=\"border:black solid 1px;width: 500px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A2_IP-for-DC.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A2_IP-for-DC.png 619w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_1A2_IP-for-DC-300x230.png 300w\" sizes=\"(max-width: 619px) 100vw, 619px\" \/><br><\/li>\n\n\n\n<li>Confirm your LDAP connection type and decide if you want to allow the use of LDAP if the connection using secure LDAP fails.<br><img decoding=\"async\" width=\"619\" height=\"474\" class=\"wp-image-114316\" style=\"width: 500px;border:black solid 1px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2_LDAP-vs-LDAPS.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2_LDAP-vs-LDAPS.png 619w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2_LDAP-vs-LDAPS-300x230.png 300w\" sizes=\"(max-width: 619px) 100vw, 619px\" \/><\/li>\n<\/ol>\n\n\n\n<p><div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><strong class=\"notification-card-type\" style=\"font-size: revert;color: initial;, sans-serif\">Warning:<\/strong><span style=\"font-size: revert;color: initial;, sans-serif\"> <\/span>We <strong>STRONGLY recommend against<\/strong> allowing the use of LDAP if the connection using secure LDAP fails. LDAP is not secure and increases your potential risk of cyberattacks as it sends unencrypted data. Attackers can spy on the connection and intercept packets sent over the network. We <strong>STRONGLY<\/strong> recommend the use of LDAPS only for this integration.<\/p><br> <\/div><\/div><\/div><br><div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><strong class=\"notification-card-type\" style=\"font-size: revert;color: initial;, sans-serif\">Important:<\/strong><span style=\"font-size: revert;color: initial;, sans-serif\"> <\/span>If are installing the AD import agent on a DC and have not or cannot install LDAPS or TLS, you\u00a0<strong>must<\/strong>\u00a0select the &#8220;Allow insecure connection (LDAP) to a Domain Controller if secure connection fails&#8221;option. Otherwise, the integration will fail.<\/p><br> <\/div><\/div><\/div><\/p>\n\n\n\n<ol start=\"8\">\n<li>If you checked <strong>Allow insecure connection (LDAP) to a Domain Controller, if secure connection fails<\/strong>, you must confirm that you&nbsp;understand the risk before you can proceed.<br><img decoding=\"async\" width=\"619\" height=\"474\" class=\"wp-image-114317\" style=\"width: 500px;border:black solid 1px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2A_Insecure-LDAP.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2A_Insecure-LDAP.png 619w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_2A_Insecure-LDAP-300x230.png 300w\" sizes=\"(max-width: 619px) 100vw, 619px\" \/><\/li>\n\n\n\n<li>Enter the AD Distinguished Name (DN) of the domain and click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The domain name should match the case of the domain name entered in the 探花大神 Admin Portal. For example, example.com should be entered as &#8220;DC=example;DC=com&#8221;.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"627\" height=\"480\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_3_AD-Domain.png\" alt=\"\" class=\"wp-image-114318\" style=\"border:black solid 1px\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_3_AD-Domain.png 627w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_3_AD-Domain-300x230.png 300w\" sizes=\"(max-width: 627px) 100vw, 627px\" \/><\/figure>\n\n\n\n<ol start=\"10\">\n<li>Enter the <kbd>jcimport <\/kbd>account and password, then click <strong>Next<\/strong>. Be sure to use the NetBIOS domain format and not the full DNS name. (For example, example\\jcimport and the user password).<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>If you\u2019re unsure of the NetBIOS name, right-click the domain name in ADUC and select Properties. Use the value labeled Domain name (pre-Windows 2000).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"448\" height=\"351\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/image-8.png\" alt=\"\" class=\"wp-image-100354\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-8.png 448w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-8-300x235.png 300w\" sizes=\"(max-width: 448px) 100vw, 448px\" \/><\/figure>\n\n\n\n<ol start=\"11\">\n<li>Enter your 探花大神 Organization ID, then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"627\" height=\"480\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_5_JC-OrgID.png\" alt=\"\" class=\"wp-image-114320\" style=\"width:455px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_5_JC-OrgID.png 627w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_5_JC-OrgID-300x230.png 300w\" sizes=\"(max-width: 627px) 100vw, 627px\" \/><\/figure><\/div>\n\n\n<ol start=\"12\">\n<li>Enter the import agent Connect Key, then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"622\" height=\"476\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_6_ConnectKey.png\" alt=\"\" class=\"wp-image-114321\" style=\"width:470px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_6_ConnectKey.png 622w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_6_ConnectKey-300x230.png 300w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/figure><\/div>\n\n\n<ol start=\"13\">\n<li>Enter the 探花大神 API Key for the dedicated Admin account created for the ADI, then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"622\" height=\"476\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_7_JC-APIKey.png\" alt=\"\" class=\"wp-image-114322\" style=\"width:480px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_7_JC-APIKey.png 622w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_7_JC-APIKey-300x230.png 300w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/figure><\/div>\n\n\n<ol start=\"14\">\n<li>On Selecting the File Destination, leave the defaults and click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"622\" height=\"476\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_8_Install-Folder.png\" alt=\"\" class=\"wp-image-114323\" style=\"width:468px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_8_Install-Folder.png 622w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_8_Install-Folder-300x230.png 300w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/figure><\/div>\n\n\n<ol start=\"15\">\n<li>Click <strong>Install<\/strong>. The import agent will take about 1 to 2 minutes to install.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"622\" height=\"476\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_9_Ready-to-Install.png\" alt=\"\" class=\"wp-image-114324\" style=\"width:462px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_9_Ready-to-Install.png 622w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_9_Ready-to-Install-300x230.png 300w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/figure><\/div>\n\n\n<ol start=\"16\">\n<li>Select <strong>Yes, restart the computer now<\/strong> to reboot your DC and click <strong>Finish<\/strong>.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"620\" height=\"475\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_10_Finish-Installation.png\" alt=\"\" class=\"wp-image-114325\" style=\"width:476px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_10_Finish-Installation.png 620w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Import-Agent_10_Finish-Installation-300x230.png 300w\" sizes=\"(max-width: 620px) 100vw, 620px\" \/><\/figure><\/div>\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>You must reboot your AD servers after the AD Import Agent installation.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-verify-the-jumpcloud-ad-import-agent-service-started\"><strong>Verify the 探花大神 AD Import Agent Service Started<\/strong><\/h3>\n\n\n\n<p>Once your DC restarted, verify that the service started by confirming display name: \u201c探花大神 AD Import Agent\u201d ; service name: \u201cJCADImportAgent\u201d; is running in services.msc. If the service fails to start, you can review the agent logs at C:\\Program Files\\探花大神\\AD Integration\\探花大神_AD_Import.log.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"857\" height=\"270\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/image-14.png\" alt=\"\" class=\"wp-image-100362\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-14.png 857w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-14-300x95.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-14-768x242.png 768w\" sizes=\"(max-width: 857px) 100vw, 857px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-configure-ad-import-agent\"><strong>Configure AD Import Agent<\/strong><\/h3>\n\n\n\n<p>There are several configuration options that you should implement post-installation of the AD import agent. The recommended configuration updates are:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Update LDAPS configuration file<\/li>\n\n\n\n<li>Modify the Root User Container Used by AD Import<\/li>\n\n\n\n<li>Update the security group name if your environment has multiple domains<\/li>\n<\/ul>\n\n\n\n<p>Verify and update default import settings described in <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for AD Import<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>&nbsp;To change any of the configuration options, start by opening the AD Import Agent configuration file using a text editor: <kbd>C:\\Program Files\\探花大神\\AD Integration\\AD Import\\jcadimportagent.config.json<\/kbd><\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-modify-the-root-user-container-used-by-ad-import\"><strong>Modify the Root User Container used by AD Import<\/strong><\/h4>\n\n\n\n<p>If your Root User Container is the default CN=Users;DC=company;DC=com, you can skip this section.<\/p>\n\n\n\n<p>If you\u2019re using a different Root user container for managing AD resources with the AD Import agent, follow the steps below to modify the User container location in the agent configuration json file.&nbsp;<\/p>\n\n\n\n<ol>\n<li>Verify the full LDAP path for the chosen Root user container you have selected in ADUC:\n<ol style=\"list-style-type:lower-alpha\">\n<li>From the ADUC panel\u2019s View menu, enable Advanced Features.&nbsp;<\/li>\n\n\n\n<li>Right-click the container and select Properties.&nbsp;<\/li>\n\n\n\n<li>Select the Attribute Editor tab.&nbsp;<\/li>\n\n\n\n<li>Select the \u201cdistinguishedName\u201d attribute, then click View.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"772\" height=\"569\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/image-15.png\" alt=\"\" class=\"wp-image-100363\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-15.png 772w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-15-300x221.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-15-768x566.png 768w\" sizes=\"(max-width: 772px) 100vw, 772px\" \/><\/figure>\n\n\n\n<ol start=\"2\">\n<li>In the AD Import Agent configuration file, replace the CN=Users;DC=company;DC=com reference in the LDAP section of the json configuration file with the \u201cdistinguishedName\u201d value from ADUC, leaving the CN=探花大神 security group reference in place. See the example below:<\/li>\n<\/ol>\n\n\n\n<p>An example of the configuration file that has been changed from the Defaults to match what\u2019s actually the true Root User Container. In the below example config, Example\u2019s Root User Container needs to be, CN=探花大神;OU=Corporate Users;DC=example;DC=com.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Be sure to place semicolons ( ; ) between the values, e.g., \u201cCN=探花大神;OU=Corporate Users;DC=contoso;DC=com\u201d<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>You must create or relocate the 探花大神 security group to this Root user container and grant delegated control to the service account for AD Import agent integration. The LDAP values noted in this DN specify the explicit path to the location of the 探花大神 security group in your AD environment.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-modify-the-security-group-used-by-ad-import\"><strong>Modify the Security Group used by AD Import<\/strong><\/h4>\n\n\n\n<p>You will need to update the security group name in the AD import configuration file to match the name you gave the 探花大神 integration Security Group in the Create the 探花大神 ADI Integration Security Group in AD above.<\/p>\n\n\n\n<ol>\n<li>Update the security group reference in the DN, CN=探花大神, to match the name you gave the 探花大神 integration security group.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"814\" height=\"235\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/cn-jumpcloud.jpg\" alt=\"\" class=\"wp-image-100620\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/cn-jumpcloud.jpg 814w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/cn-jumpcloud-300x87.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/cn-jumpcloud-768x222.jpg 768w\" sizes=\"(max-width: 814px) 100vw, 814px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-modify-default-advanced-configuration-settings-for-ad-import\"><strong>Modify default Advanced Configuration settings for AD Import<\/strong><\/h4>\n\n\n\n<p>Adjust the default configuration settings to control how the import works and what happens to users in 探花大神 when certain actions are taken in AD.&nbsp;These settings are considered advanced configurations.&nbsp;See <a href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\">Advanced Configurations for AD Import<\/a> for more information.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-save-the-configuration-changes-and-restart-the-ad-import-agent-service\"><strong>Save the configuration changes and restart the AD import agent service<\/strong><\/h4>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>You do not need to restart the DC only restart the service to apply configuration changes.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Once all configuration changes have been made save them and restart the service.<\/p>\n\n\n\n<ol>\n<li>Save the jcadimportagent.config.json file.<\/li>\n\n\n\n<li>Restart the 探花大神 AD Import Agent service using the Windows Service Manager.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-verify-ad-import\"><strong>Verify AD Import<\/strong><\/h3>\n\n\n\n<p>Once you\u2019ve installed and configured AD Import within your environment, you can easily verify that the 探花大神 AD Import Agent is working. Please ensure the following are present and visible:&nbsp;The 探花大神 AD Import Agent should be shown as green and active within the Admin Portal under <strong>Directory Integrations &gt; Active Directory &gt; Your ADI Instance<\/strong> <strong>&gt; Domain Agents<\/strong> section.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"721\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Details_ADtoJC_1Agent-1024x721.png\" alt=\"\" class=\"wp-image-114385\" style=\"border:black solid 2px\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Details_ADtoJC_1Agent-1024x721.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Details_ADtoJC_1Agent-300x211.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Details_ADtoJC_1Agent-768x541.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/Details_ADtoJC_1Agent.png 1361w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If the AD Import Agent(s) are showing red or are in a non-connected state, please check services.msc to see if the service is running.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>探花大神 User Group is now within your 探花大神 organization. The 探花大神 User Group should have a User Group icon with an AD badge in the User Group Details pane. See the example below:\n<ul>\n<li>Navigate to <strong>User Management &gt; User Groups<\/strong>. You should see the 探花大神 User Group with a Microsoft badge next to it. Click on the User Group to open up its details.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"713\" height=\"125\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/image-21.png\" alt=\"\" class=\"wp-image-100369\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-21.png 713w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-21-300x53.png 300w\" sizes=\"(max-width: 713px) 100vw, 713px\" \/><\/figure>\n\n\n\n<ul>\n<li>When opened, you can see that the User Group has a Microsoft Badge and is also assigned to AD on the Directories tab.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"727\" height=\"221\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/image-22.png\" alt=\"\" class=\"wp-image-100370\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-22.png 727w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/image-22-300x91.png 300w\" sizes=\"(max-width: 727px) 100vw, 727px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-next-steps\"><strong>Next Steps<\/strong><\/h2>\n\n\n\n<p>Please read the <a href=\"https:\/\/jumpcloud.com\/support\/use-the-Active-Directory-Integration\">Using and Managing the ADI<\/a> article next.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-want-additional-assistance-from-jumpcloud-nbsp\">Want additional assistance from 探花大神?&nbsp;<\/h3>\n\n\n\n<p>If you\u2019re having issues with getting 探花大神\u2019s ADI working, try the <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-adi\">Troubleshooting Guide<\/a>.<\/p>\n\n\n\n<p>探花大神 offers myriad professional services offerings to assist customers with implementing and configuring 探花大神. If you\u2019re looking for assistance with Migrating from AD, or to integrate AD with 探花大神, we recommend you reach out to 探花大神\u2019s Professional Services team on the following page: <a href=\"https:\/\/jumpcloud.com\/professional-services\">Professional Services &#8211; 探花大神<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The 探花大神 Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between 探花大神 and on-premise or off-premise [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2954],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure ADI: Manage AD users, security groups, and passwords<\/title>\n<meta name=\"description\" content=\"Learn how to configure 探花大神&#039;s Active Directory Integration (ADI) to manage resources from Active Directory.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure ADI: Manage users, security groups, and passwords in AD\" \/>\n<meta property=\"og:description\" content=\"Browse the 探花大神 Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\" \/>\n<meta property=\"og:site_name\" content=\"探花大神\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-18T16:57:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"24 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\",\"url\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\",\"name\":\"Configure ADI: Manage AD users, security groups, and passwords\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg\",\"datePublished\":\"2023-10-26T08:02:48+00:00\",\"dateModified\":\"2025-03-18T16:57:28+00:00\",\"description\":\"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from Active Directory.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg\",\"width\":726,\"height\":332},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Configure ADI: Manage users, security groups, and passwords in AD\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"探花大神\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"探花大神\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"探花大神\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configure ADI: Manage AD users, security groups, and passwords","description":"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from Active Directory.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud","og_locale":"en_US","og_type":"article","og_title":"Configure ADI: Manage users, security groups, and passwords in AD","og_description":"Browse the 探花大神 Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud","og_site_name":"探花大神","article_modified_time":"2025-03-18T16:57:28+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"24 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud","url":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud","name":"Configure ADI: Manage AD users, security groups, and passwords","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg","datePublished":"2023-10-26T08:02:48+00:00","dateModified":"2025-03-18T16:57:28+00:00","description":"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from Active Directory.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/AD-Import-single-domain-workflow.jpg","width":726,"height":332},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Configure ADI: Manage users, security groups, and passwords in AD"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"探花大神","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"探花大神","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"探花大神"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97088"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97088\/revisions"}],"predecessor-version":[{"id":122296,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97088\/revisions\/122296"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=97088"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=97088"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=97088"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=97088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}