> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Configure an AD Connector directory (Preview)

You can configure an AD Connector directory to sync users from an on-premises Active Directory using a lightweight AD Connector native Windows application. Changes made to your Active Directory are automatically synced with Identity as a Service. You do not need to trigger synchronization.

To configure an AD Connector directory, you need to do the following:

1. Optional. Create custom user attributes. See [Create and manage user attributes](/docs/people-and-access/manage-members/create-and-manage-user-attributes.md).
2. Download and install the AD Connector and add AD Connector groups. (See [Install AD Connector and add groups](/docs/directories-and-provisioning/manage-directories/configure-an-ad-connector-directory/install-ad-connector-and-add-groups.md)
3. Add the AD Connector directory. (See [Add AD Connector directory](/docs/directories-and-provisioning/manage-directories/configure-an-ad-connector-directory/add-an-ad-connector-directory.md))
4. Create a resource rule to protect access to the AD Connector directory (see [Create and manage resource rules](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules.md)).

## Password change behavior

When you change an AD Connector password, a password change will result in two password authentication events in the Identity as a Service AD Connector user authentication event log on the machine where AD Connector is installed.