Active Directory integrations

Active Directory integrations

→

Visma YouServe → Active Directory

YouServe to Active Directory integration: accounts that follow the personnel records

→

Workday → Active Directory

Workday to Active Directory integration: accounts, folders and groups automatically

→

Visma Raet YouForce → Active Directory

YouForce to Active Directory integration: accounts opened and closed from Visma Raet

→

HiBob → Active Directory

HiBob to Active Directory integration: accounts in your own network, automatically

→

HR2day → Active Directory

HR2day to Active Directory integration: accounts per school or location from HR

→

Nedap ONS → Active Directory

Nedap ONS to Active Directory integration: accounts per care location, automatically

Systems you can connect Active Directory with

How KoppelHet connects to Active Directory

KoppelHet writes to AD through an agent the customer installs in its own network. The agent makes an outbound connection to the platform, so no ports need to be opened.

Objects we connect

• User accounts and attributes
• Organizational units (OUs)
• Security and distribution groups

What a Active Directory integration does

• AFAS Profit, Visma Raet YouForce, Nmbrs → to Active Directory

  Account with naming rules in the right OU

  A new employee from AFAS, YouForce or Nmbrs becomes a user in the OU of their department or location. sAMAccountName and email address follow the naming rules agreed up front.

  AFAS Profit integrationsVisma Raet YouForce → Active Directory integrationNmbrs → Active Directory integrationIdentity and access management

• HiBob, Personio, Workday → to Active Directory

  Cloud HR to your own domain

  Changes from HiBob, Personio or Workday reach Active Directory through the agent in the customer's network. Entra Connect then syncs on to Entra ID.

  HiBob → Active Directory integrationPersonio → Active Directory integrationWorkday → Active Directory integrationIdentity and access management

• AFAS Profit, SAP SuccessFactors → to Active Directory

  Groups per department and job

  Security and distribution groups follow department and job from HR, so shares and mailing lists stay correct without manual work.

  AFAS Profit integrationsSAP SuccessFactors → Active Directory integrationIdentity and access management

What to watch for

• Naming rules for sAMAccountName and email address (duplicate names, prefixes, name changes) are agreed up front and tested with real data.

In your IT landscape

• Runs as a managed integration on the KoppelHet platform, next to your existing integration layer. No VPN into your network.
• Only the fields in the design you approve are transferred. The platform keeps no register of its own.
• Tested first in the test or acceptance environment where there is one. You choose the go-live moment.
• ISO 27001 certified, hosted in Amsterdam. When the contract ends you receive the configuration and the audit logs.

Implementation, architecture and compliance

Processes with this system

• Identity and access management

Topics that involve Active Directory

• Joiners, movers and leavers
• Offboarding
• Contractors and temporary access
• Roles and RBAC
• Access review and audit log
• Active Directory
• NIS2 and the Dutch Cyber Security Act
• IAM in government
• IAM in healthcare

Customer cases

DAEL Groep

Installation engineering

AFAS is the source for Active Directory and Entra ID. Accounts, email addresses and groups are created, updated and deactivated automatically based on HR changes.

“Thanks to KoppelHet's user comparison between the HR system and our AD, we quickly saw where AFAS and Microsoft differed.”

Read the customer story

Fokker Services Group

Aviation

Fokker Services Group uses AFAS as the source for Active Directory and Entra ID. Staff at the Singapore entity are kept in Unit4 HR; a second integration puts them into AFAS, so they get an account through the same route.

Read the customer story

Articles about Active Directory

• Keeping people in the service desk current without Excel imports
• Last working day or end date: which date counts when leaving?
• Why a job change often does not reach IT