Active Directory Integration

True Protection by Jag integrates with Microsoft Active Directory (AD) to simplify user management, device enrollment, and policy assignment. AD integration allows you to leverage your existing directory structure for security management.

Integration Benefits

Single Sign-On (SSO): Console administrators can sign in using their Active Directory credentials.
Automatic Device Grouping: Devices are automatically organized based on their AD Organizational Unit (OU) placement.
Policy Mapping: Map True Protection policies to AD groups or OUs for automatic policy assignment.
User Synchronization: User accounts and group memberships are synced from AD, eliminating manual user management.

Setting Up AD Integration

Step 1: In the Management Console, navigate to Settings > Directory Services > Active Directory.
Step 2: Enter your domain controller hostname and port (default: 389 for LDAP, 636 for LDAPS).
Step 3: Provide a service account with read access to the directory (domain user with no special permissions required).
Step 4: Configure the base DN and optional search filters.
Step 5: Test the connection and review the discovered OUs and groups.
Step 6: Enable sync and configure the sync interval (default: every 4 hours).

Azure Active Directory (Entra ID) is also supported through the SCIM provisioning protocol. Navigate to Settings > Directory Services > Azure AD for cloud directory integration.