Activation with Microsoft Active Directory can be set-up to avoid manual creation of users. Also once integration is set-up, users will be logging in using Microsoft AD credentials. An SSO configuration is possible. Learn more about SSO configuration.
There are two options on how integration can be configured:
- Data imported from Microsoft AD can’t be changed
- Data imported from Microsoft AD can be changed without syncing it back.
In the second case users can’t modify fields that are stored in Microsoft AD such as password, title, department, name etc. Even when integration is configured, it is still possible to create users that are not using Microsoft AD authentication.