---
title: "Multi-Tenant Active Directory Setup and Sync"
slug: "multi-tenancy-active-directory-setup-sync"
tags: ["Multi-Tenancy ", "active directory", "Active Directory Sync", "Scheduled Jobs"]
updated: 2026-03-16T21:11:17Z
published: 2026-03-16T21:11:17Z
canonical: "documentation.decisions.com/multi-tenancy-active-directory-setup-sync"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Multi-Tenant Active Directory Setup and Sync

## Overview

[**Multi-Tenancies**](https://documentation.decisions.com/v9/docs/about-multi-tenancy) now support the ability to integrate [**Active Directory**](https://documentation.decisions.com/v9/docs/integrating-active-directory-with-decisions), as well as its capability to manage domains, **Accounts**, objects, etc, within their environments. By doing so, **AD Syncs** can be performed first on the [**Control Instance**](https://documentation.decisions.com/v9/docs/multi-tenancy-setting-up-a-control-instance), and then its subsequent [**Tenants**](https://documentation.decisions.com/v9/docs/multi-tenancy-adding-and-setting-up-a-tenant-instance).

### Prerequisites

The **Active Directory Module** must be [installed](https://documentation.decisions.com/v9/docs/installing-modules-decisions) on both the **Control** and **Tenant** **Instances**.

---

## Setup

1. After the [**Active Directory Module**](https://documentation.decisions.com/v9/docs/active-directory-module-steps) has been installed on both the **Control** and **Tenant** **Instances**, from the Control Instance, navigate to **System > Settings,** and open **Active Directory Settings**.
2. In the resulting window, under **Servers**, click ADD.  
  
Under **PORTAL SETTINGS > Default Groups**, click ADD NEW and select the desired Default **Group**; this selection designates which Group the synced Accounts will be added to. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2024-07-30_16h35_25.png)
3. Under SERVER SETTINGS, configure the settings as follows:  
  

| Setting | Configuration |
| --- | --- |
| Domain Name | Provide the Domain or IP Address for the AD Server. |
| Domain Login Prefix | Provide the required Prefix upon user login. |
| Default Email Domain | Provide the default Email Domain for the AD Server. |
| Elevated User Name | Provide the User Name for an Account with AD access. |
| Elevated User Password | Provide the respective password for the Elevated User Name. |

![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2024-07-30_16h39_31.png)
4. Under **SYNCHRONIZATION SETTINGS > Synchronization Option**, select one of the following Synchronization Options; in this example, **Selected** **Groups**.  
  

| Option | Function |
| --- | --- |
| EntireDomain | Syncs users from all Group(s). |
| SelectedOrgUnits | Syncs users from the designated Organization Unit(s). |
| SelectedGroups | Syncs users from the designated Group(s). |
5. Under **Select Groups**, click ADD and select the desired **Group. This** designates which Groups are added in the **AD Sync**.  
  
Then, enable any desired additional SYNCHRONIZATION SETTINGS (see chart below), then click OK. Repeat steps 1-4 for each additional **Tenant** **Instance**.  
  

| Setting | Function |
| --- | --- |
| Ignore Managers if not in Group | Omits Manager Accounts from the Sync if they are not included in one of the selected Groups within the Sync list. |
| Sync Managers for Users | Syncs Manager Accounts that have been assigned to Users in each Group in the Sync, |
| Include Users Groups not in Group List | Includes additional Groups in the Sync not in the included in the Select Groups list. |

![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2024-07-30_16h46_04.png)

---

## Multi-Tenant AD Sync Job

1. After installing the **Active Directory Module** on each **Instance** in a **Multi-Tenancy** and establishing proper **AD Server Authentication** on each one, from the **Control** **Instance**, navigate to **System > Administration > Jobs and Events > Schedule Jobs**.
2. From the **Global Action Bar**, select NEW AD SYNC JOB.
3. From the **New AD Sync Job** window, configure the [**AD Sync Job**](https://documentation.decisions.com/v9/docs/creating-an-active-directory-ad-sync-job#example) by providing the desired **Schedule Properties**, **Info**, and **Run And Failure** settings. Then, click SAVE. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2024-07-30_16h50_29.png)
4. Right-click the new **AD Sync Job**, and select **Run Job**.  
  
After the **Job** runs successfully, repeat steps 1-4 as needed for each additional **Tenant Instance**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2024-07-30_16h53_17.png)

---

For more information regarding Multi-Tenancy, see [Decisions Forum: Multi-Tenant](https://support.decisions.com/forum/forum23-multitenant.aspx).