# AD Connect

> Install and configure Ironchip AD Connect on Windows to synchronize users and groups from Active Directory with the admin console.

URL: https://docs.ironchip.com/en/identidad/administracion/sincronizacion/ad-connect/

Ironchip AD Connect is a tool that synchronizes the users and groups of your Active Directory with the Ironchip admin console. It installs as a Windows service and is configured from a local panel.

## Installation

1. Download Ironchip AD Connect from the **Plugins** section of the admin console.
2. Open a PowerShell terminal as administrator and go to the folder where the executable is.
3. Install the service and start it:

   ```powershell
   .\ironchip-ad-connect.exe s install
   .\ironchip-ad-connect.exe s start
   ```

   [Image: Install and start commands for the service in PowerShell]

4. Open `http://localhost:10300` in a browser. It is a local address that hosts the user synchronization panel.

   [Image: localhost:10300 address in the browser bar]

To stop or uninstall the service, run:

```powershell
.\ironchip-ad-connect.exe s stop
.\ironchip-ad-connect.exe s uninstall
```

To see the rest of the available commands, run:

```powershell
.\ironchip-ad-connect.exe h
```

## Configuration

The first step is to establish the connection between Ironchip and Active Directory. In the panel, fill in the configuration section and click the green **Configure** button:

- **User**: the domain and name of an Active Directory user with administrator permissions.
- **Password**: the password of that user.
- **SCIM synchronization key**: the SCIM synchronization key of your company, which you get in the Ironchip console (see the next section).

[Image: AD Connect Configure form with the user, the password, and the SCIM synchronization key]

### Get the SCIM synchronization key

The **SCIM synchronization key** is the secret of a SCIM credential of your company. To create it, go to **Directory > Synchronization > SCIM**, open the **Credentials** tab, and click **Add credential**. The steps, with screenshots, are in [SCIM in the console](https://docs.ironchip.com/en/identidad/administracion/sincronizacion/#scim-in-the-console).

## Select users and groups

Once configured, choose which users and groups to synchronize.

1. In the **Groups** section, click the green **+** button.

   [Image: + button on the Groups tab of AD Connect]

2. In the new tab, select the units or groups you want to synchronize with the Ironchip console and click **Add Groups**.

   [Image: Directory group tree with the Add Groups button]

3. Click **Start** to begin the synchronization.

   [Image: Synchronized Groups list and Start button to begin the synchronization]