AD & Integration Status

Open the application's integration settings and select a connector. Configure only the scopes and permissions required, test the connection, preview proposed records, and confirm synchronization where supported.

IntegrationConfiguration and current status
Microsoft Active DirectoryImplemented connector: domain-controller LDAP/LDAPS URL, domain, bind username/password, Base DN, filters, scopes, and mappings. The application host must reach the controller. Use an approved directory account and certificate configuration.
Microsoft Entra IDConfiguration fields exist for Graph URL, tenant ID, client ID, secret, and scopes. It is not marked implemented in the current registry, so working synchronization is not available.
Microsoft IntuneConfiguration entry exists, but its connector is not implemented in the current dispatcher. Operational Intune synchronization is not available.
Generic REST API integrationConfiguration entry exists; a generic working connector is not established in the dispatcher. This is separate from the implemented endpoint check-in API.
Endpoint check-in APIImplemented authenticated POST endpoint described above. 401 means invalid token; 503 means the server token is not configured.

AD integration synchronizes directory records; it does not itself install endpoint software. Domain deployment is separate from LDAP configuration. Do not imply every internal API accepts the discovery token: other endpoints have their own authentication and role requirements.