Skip to main content

AD Sync Service

Overview​

The aim of this section is to provide guidance on Atria's AD Sync service. This article will teach you what the AD Sync service is and what features it provides, with further sections giving more detail into the various configuration options available and how to install the service.

This section provides an introduction and complete guidance on Atria’s AD Sync service. You’ll learn what AD Sync is, the scenarios it’s designed for, and the key features it offers to support multi-domain and multi-tenant environments.

In addition to understanding the core functionality, this section outlines the configuration options available and walks you through the steps required to deploy the service. Whether you're a reseller, MSP, or IT administrator managing multiple AD environments, this article is your starting point for implementing secure and scalable Active Directory synchronization with Atria.

What is AD Sync?​

The AD Sync service for Atria enables external Active Directory (AD) environments—typically managed by customers or client organizations—to securely replicate user accounts into a centrally managed hosted AD environment.

This service is essential for multi-tenant or reseller scenarios, where:

  • A reseller or service provider manages a shared set of hosted resources
  • A client (or “child” organization) wants to retain control of their own AD infrastructure
  • The client’s users need seamless access to hosted applications using their existing credentials

Instead of directly integrating via Atria’s Remote AD feature (which keeps users and resources isolated per domain), AD Sync pushes user and password information from the customer’s AD and creates corresponding accounts in the provider’s AD domain. This one-way sync allows external users to authenticate into shared services while maintaining a separation of infrastructure for compliance or security reasons.

Key Benefits​

  • Credential Continuity: Users log in using the same username and password as their own domain.
  • Infrastructure Separation: Clients maintain their own domain controllers and internal policies.
  • Seamless Access: Synced users can access reseller-managed or hosted apps and services without needing duplicate accounts.

How It Works​

  • An AD Sync client is installed on each customer domain controller.
  • This client monitors local user and password changes and sends updates to Atria using a secure, one-way API connection.
  • Atria picks up these user changes and creates or updates corresponding accounts in the provider’s hosted AD.
  • The connection can be customized to sync only specific organizational units (OUs) or user attributes.

Architecture Highlights​

  • One-way sync only: From customer AD to the hosted AD domain.
  • Encrypted communication: API requests are secured using RSA/AES encryption and SHA1 hashing.
  • Optional proxy support: Can operate through a proxy server for environments with restricted outbound access.
  • Monitoring: Services Manager includes a server monitor to track the connectivity status of all AD Sync clients.

This model supports resellers and service providers in scaling their infrastructure securely while giving their customers a frictionless authentication experience into managed services.

Getting Started​

If you're planning to use AD Sync, the next steps are essential to ensure a successful setup:

  1. 📘 ADSync Tool Usage Guide
    This is your first stop. It’s critical to read and fully understand this guide before proceeding. It covers how the service operates, what it syncs, and how it fits into your Atria-managed environment.

  2. 🚀 Deployment Guide
    Once you're confident with how AD Sync works, deployment is straightforward. The setup process is intuitive and walks you through installing the AD Sync client on your domain controllers.

  3. ⚙️ Application Settings Reference
    After deployment, this document provides a full overview of configuration options available via the ADSync.exe.config file—perfect for tailoring the sync behavior to your exact needs.

If you experience any issues or require any assistance, please contact us at support@getatria.com.