Active Directory users are added when the user profiles are synced from Active Directory to the Workspace ONE Access directory.

Because members of groups are not synced until the group has entitlements, add all users who need to access the Workspace ONE Access service when you initially set up .


Active Directory attributes mapped to user attributes in the Identity & Access Management > Setup > Users Attributes page. See the Directory Integration with Workspace ONE Access publication for more information about integrating Active Directory with Workspace ONE Access.


  1. In the Workspace ONE Access console, Identity & Access Management tab, click Manager > Directories.
  2. Select the directory where you want to update the user filters.
  3. Click Sync Settings and select Users.
  4. In the Specify the user DNs row, click + and enter the user DNs.
    Enter user DNs that are under the Base DN configured for the Active Directory. If a user DN is outside the BaseDN, users from that DN are synced but cannot log in.
  5. Click Save.