Nova IAM, home
Request a demo
Request a demo

Directories & identity providers

ConnectorStandard

Active Directory

Nova provisions user accounts and group memberships directly in Active Directory, from creating a new hire's first account to revoking every entitlement when someone leaves.

Request a demo All integrations

Capabilities

What Nova does with Active Directory

  • Accounts with naming rules

    Creates user accounts with configurable naming rules for UPN and email address, including a live preview; accounts can start out disabled as pre-staged accounts.

  • Group assignment

    Assigns and removes AD group memberships; groups are tracked by objectGUID and stale references are repaired automatically.

  • Nested groups

    Resolves nested groups so recertification shows inherited permissions, not just direct memberships.

  • Disabling and passwords

    Disables and enables accounts via the userAccountControl flag; passwords are set exclusively over LDAPS, optionally forcing a password change at first logon.

  • Journal and rollback

    Journals every write with before-and-after state and can roll changes back, including restoring deleted accounts; each revert is checked against the live directory first.

  • Import and inactivity

    Imports existing users and groups through background jobs and reads last-logon timestamps for inactivity checks.

Technology and process

Integration and identity lifecycle

Technical integration

Nova connects over LDAP/LDAPS using the Active Directory profile of its LDAP connector; password operations (unicodePwd) require LDAPS. Objects are referenced by objectGUID, so renames and moves do not break assignments.

In the identity lifecycle

Joiners get their AD account created automatically through lifecycle routines, movers have attributes and groups adjusted, and leavers are disabled. Approved access requests are provisioned as group memberships, and recertification compares the desired state against what is actually in the directory.

More in the catalog

Related integrations

All product names, logos and brands mentioned are property of their respective owners. They are referenced solely to describe compatibility and do not imply any partnership or endorsement.

Next step

Ask your questions live on the system.

30 minutes via video call on the demo system: you name your use cases, we show the relevant functions.

Request a demo

What happens next

  1. ReplyWe usually get back to you on the same working day and agree a date with you.
  2. PreparationWe prepare the demo around the topics you name.
  3. 30 minutes via video callLive on the demo system with fictitious data: you ask, we show the relevant views.