Active Directory users are added when the user profiles are synced from Active Directory to the Workspace ONE Access directory.

Because users that are members of a group are not synced to the directory until the group is entitled to an application or the group name is added to an access policy rule, add all users who need to access the Workspace ONE Access service when you initially select the users to sync.


Active Directory attributes mapped to user attributes in the Settings > Users Attributes page. See the Directory Integration with Workspace ONE Access publication for more information about integrating Active Directory with Workspace ONE Access.


  1. In the Workspace ONE Access console Integrations > Directories page, select the directory where you want to update the user filters.
  2. Click Sync Settings and select Users.
  3. In the Specify the user DNs row, click + and enter the user DNs.
    Enter user DNs that are under the Base DN configured for the Active Directory. If a user DN is outside the BaseDN, users from that DN are synced but cannot log in.
  4. Click Save.