vRealize Automation Cloud Assembly supports integration with Active Directory servers to provide out of the box creation of computer accounts in a specified Organizational Unit (OU) within an Active Directory server prior to provisioning a virtual machine.

Active Directory integration supports only an LDAP connection to the Active Directory server.


  • If you are configuring an Active Directory integration with vCenter on-premises, you must configure an extensibility cloud proxy for the Active Directory integration. Select Extensibility > Activity > Integrations and choose Extensibility Actions On Prem.
  • If you are configuring an integration with Active Directory in the cloud, you must have a Microsoft Azure or Amazon Web Services account.
  • You Active Directory server must use an LDAP server connection.
  • You must have a project configured with appropriate cloud zones, and image and flavor mappings to use with the Active Directory integration.
  • The desired OU on your Active Directory must be pre-created before you associated your Active Directory integration with a project.


  1. Select Infrastructure > Connections > Integrations and then New Integration.
  2. Click Active Directory.
  3. On the Summary tab, enter the appropriate LDAP host and environment names.
  4. Enter the name and password for the LDAP server.
  5. Enter the appropriate Base DN for the desired users and groups in your Active Directory.
    Note: You can specify only one DN per Active Directory integration.
  6. Click Validate to ensure that the integration is functional.
  7. Enter a Name and Description of this integration.
  8. Click Save.
  9. Click the Project tab to add a project to the Active Directory integration.
    On the Add Projects dialog, you must select a project name and a relative DN, which is a DN that exists within the Base DN specified on the Summary tab.
  10. Click Save.


You can now associate the project with Active Directory integration to a blueprint. When a machine is previsioned using this blueprint, it will be pre-staged in the specified Active Directory and Organizational Unit.