Skip to main content
Prudhvi Keertipati
Prudhvi Keertipati
Guru
February 3, 2025
Question

PRA - AD Group Synchronization (Pre-Provisioning)

  • February 3, 2025
  • 21 replies
  • 680 views

Hi All,

In PRA, we have a SAML security provider configured for user authentication and provisioning. User will only be provisioned when they first-time logged in.

Is there anyway we can pre-provision the users by LDAP/AD Group synchronization similar functionality as Password Safe (without using SCIM).

 

Thanks,

 

    21 replies

    Show previous replies
    MichelB
    BeyondTrust Employee
    MichelB
    BeyondTrust Employee
    March 10, 2026

    FYI it is possible to separate AuthN and AuthZ, Authentication/SSO and Authorization/Access Governance, for PRA using SCIM and SAML together.  This takes care of pre-provisioning.  See for example:  

     

    Badge Earners

    • BCA: Password Safe
      Ol Oeunhas earned the badge BCA: Password Safe
    • BCIE: Password Safe
      tonghualeohas earned the badge BCIE: Password Safe
    • BCIE: Endpoint Privilege Management - Windows
      Sathiya.Khas earned the badge BCIE: Endpoint Privilege Management - Windows
    • BCSE: Endpoint Privilege Management - Windows
      Alejandro Sanjaumehas earned the badge BCSE: Endpoint Privilege Management - Windows
    • BCSE: Identity Security Insights
      Alejandro Sanjaumehas earned the badge BCSE: Identity Security Insights
    Show all badges
    Terms & ConditionsAccessibility statement