--- title: "Sync Idaas tenant user with Active Directory" slug: "sync-rapididentity-with-ad-for-windows-auth-client" description: "How to synchronize users between RapidIdentity Cloud and Active Directory for MFA and SSO with the RapidIdentity Windows Authentication Client" tags: ["Windows Authentication Client", "RapidIdentity Cloud Users", "Administrator", "How To", "MFA", "SSO"] updated: 2023-06-06T16:58:14Z published: 2023-06-06T16:58:14Z canonical: "help.rapididentity.com/sync-rapididentity-with-ad-for-windows-auth-client" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.rapididentity.com/llms.txt > Use this file to discover all available pages before exploring further. # Sync RapidIdentity with Active Directory for the Windows Authentication Client ## Sync RapidIdentity Cloud Users with AD for the Windows Authentication Client This document describes a way to sync RapidIdentity Cloud users with AD Domain controller for the RapidIdentity Windows Authentication Client. Reference link to documentation on **RapidIdentity Connect** : [RapidIdentity Connect](https://help.rapididentity.com/docs/working-with-connect) - Install the Connect Active Directory Password Filter Adapter, which extends the Active Directory schema to capture password changes in AD. - Reference link :[Install the Active Directory Password Filter](https://help.rapididentity.com/docs/active-directory-adapter-reference#connect-password-filter) - Make a successful Identity Bridge connection in RapidID tenant with Domain controller. - [Directions for Creating an ID Bridge Connection](/v1/docs/identity-bridge-quick-start-guide) ![11-1.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/11-1.png) - Download RapidIdentityToAD and FnHasRecordChanged action set (both files linked below) to local PC. [RapidIdentityToAD.xml](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/RapidIdentityToAD.xml) [FnHasRecordChanged.xml](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/FnHasRecordChanged.xml) - In the Connect Module, use the Import option in the bottom navigation bar to upload the downloaded Action Sets. ![Connect - Import](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.15.49%20PM.png) - Once the imports are complete, navigate to the Files tab and click on the SharedGlobals.properties File in the list that appears. Once it is highlighted, click on Edit in the bottom navigation bar. ![Files - Edit](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.18.32%20PM.png) - Copy the codeblock pasted below, and be sure to customize all fields in the block to reflect your specific environment. ``` adHost=bridge-.idaas-.svc.cluster.local adUser=Domaincontroller Account user @ adPwd=decrypt password of adUser (given decryption is for - idAuto#123) adPort= Port number on which your identity bridge is connected. adSSL = true adBaseDN=DN=,DC= adDNSDomain= ``` Note: If Domain Name is authclient.idautoengineering.net then write for adBaseDN adBaseDN=DC=authclient,DC=idautoengineering,DC=net - Once the custom fields have been updated, paste this codeblock at the bottom of the Properties code as seen in the image below. Click Save in the bottom navigation bar to save your changes. ![code block](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.26.49%20PM.png) - Navigate back to Action Sets via the tab seen in the left navigation bar. Highlight the Action Set titled 'KW_RapidIdentityToAD_copy' by checking the checkbox, and click on the Details button. ![action set - details](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.33.23%20PM.png) - Once the Details are open, rename the **myBridgeName** property by entering your Identity Bridge name in it. ![Screenshot 2023-05-31 at 3.35.34 PM.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.35.34%20PM.png) - In the botton navigation bar, click the Run option. A right side menu will appear that shows the settings for this Run Action. Set the **logOnly** field to false and check the box for **Enabled Detailed Tracing**. Once the settings match the image below, click the Run button to run the Action set for all users. ![Run Action](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-05-31%20at%203.40.26%20PM.png) *A log of the Action Set run will appear in a new tab when the process is complete.* ## Related - [Windows Authentication Client](/rapididentity-windows-authentication-client.md) - [Windows Auth Client Project Setup, Installation, and Upgrade on VM](/authclient-project-setup-and-installation-and-upgrade-on-vm.md) - [Windows Autopilot - Enrolling a Device in Microsoft Intune](/windows-autopilot-enrolling-a-device-in-microsoft-intune.md) - [Windows AuthClient v1.3.0 Release Notes](/windows-authclient-v130-release-notes.md) - [Uninstalling Windows Client](/uninstalling-windows-client.md) - [RapidIdentity Windows Authentication Client Release Notes](/rapididentity-windows-auth-client-release-notes.md) - [Authentication for Windows Client](/authentication-for-windows-client.md)