Add users from an external directory service

The topics in this section describe how to add a directory service (for example, LDAP) to Identity Administration so you can continue using your existing directory without migrating users to another directory source.

After you add your existing directory service, users can access Identity Administration with their existing user accounts.

You can use all directory services simultaneously. For example, you can use Active Directory/LDAP as your primary directory service, and the CyberArk Cloud Directory as a convenient supplemental repository for :emergency administrators, temporary users, contractors or less-trusted third parties.

To avoid users logging in with the wrong account and other account-related confusion, CyberArk recommends that you do not create duplicate accounts (same user name/password) in both the CyberArk Cloud Directory and external directory sources.