Syncing Active Directory Groups to the Workspace ONE Access Directory

When a group distinguished name is mapped from your enterprise directory to the Workspace ONE Access directory, the group names are added to the directory. The group members are not synced to the directory.

The Groups page in the Workspace ONE Access console displays the group names that are synced. The Users in Group column shows the number of members that have been synced. If members are not yet synced, the Users in Group column displays Not Synced.

Group members are synced to the directory when the group is entitled to an application in the Catalog or when the group is added to a rule in an access policy in Workspace ONE Access. To sync members of groups when groups are added from Active Directory, you can enable Sync Group Members to the Directory When Adding Group in the Identity & Access Management > Preferences page.