Active Directory Integration

Dashlane can be configured to automatically sync Active Directory (AD) users and groups for automated provisioning and deprovisioning of Dashlane accounts.

Video walk-through

Configuring the Admin Console

To configure your Dashlane Business account for AD synchronization, follow the steps below:

1. Log in to your Dashlane Business Admin Console by going to http://console.dashlane.com
2. Click Settings > Active Directory 
3. Select the option to enable "Automatic user provisioning and group syncing"
   • Consider turning on "Automatic User Deprovisioning" once you have verified the sync, and verified that all current Dashlane users are in scope of the sync
4. Click Copy to copy Dashlane AD script displayed in the gray window to copy it to your clipboard

Configuring Active Directory and Sync script

1. Log in to a Windows Server or workstation that has Windows Powershell 3.0 or later with a Domain User account
2. Create or identify an Active Directory Security Group that you would like to sync to Dashlane.
   
   •  We recommend creating a new group called AllDashlaneUsers to start with
3. Add users to the group you would like to have Dashlane accounts
4. Open Powershell ISE > File > New
5. Paste the script saved on your clipboard from Step 4 in the instructions above ("Configuring the Admin Console")
6. Edit line 21 of the script, enter the group names you wish to sync to Dashlane
7. Save the Powershell Script to the local machine
8. Run the Script by clicking the green arrow in Powershell ISE
9. Ensure the script returns "code":200,"message":"OK" 
10. Copy the text string between the dashes to your clipboard
11. Navigate back to http://console.dashlane.com and Refresh the page
12. In the "Verify the security key..." pop-up, click Continue
    
13. Enter the text string from your clipboard you copied from step 10 into the text field and click Verify now

Verifying the Sync

1. In the Admin Console view the Users tab and validate that any new users have an invite pending status
2. On the Groups tab view the groups that have synced
3. You can view your AD sync status in the Admin Console in Settings > Active Directory
4. It is recommended to turn on Automatic Deprovisioning once you have confirmed that all synced users are included in the Active Directory sync groups.

Scheduling Regular Sync with Task Scheduler

With the script saved to your domain, you can schedule it to run automatically at an interval you define.

Note that the user account set to run this task must be able to read Organizational Units (OU's) and user accounts in your Active Directory environment.

1. Open Task Scheduler on a Windows Server that will run the script
2. Select Task Scheduler Library 
3. Click the Action tab in the top left menu
4. Then click “Create Task” 
5. Next click the General tab
6. Type Dashlane AD Sync in the "Name:" text box
7. Next select Security Options
8. Within Security Options: Check the boxes for "Run whether user is logged in or not" and "Run with highest privileges"

Please set a schedule for the script to run by creating a new trigger. In the example shown below, it will run daily at 1:00 AM.

Then, click the Actions tab.

1. Click New Action
2. Under "Program/script," type in powershell
3. Under "Add arguments (optional)", paste -file C:\FilePathtoPowershellScript\dashlane-ad-sync.ps1

Some considerations

• Once sync is configured, we recommend managing your Dashlane groups and users exclusively via your Active Directory.
• All users considered by the script must have a specified email address in Active Directory
• Dashlane Business admins cannot deprovision all admin users, as there must be at least one active admin for every Business plan.
• Admins also cannot deprovision billing admins, as there must be at least one active billing admin for every Business plan
• The number of users in the synced groups must not be higher than the available seats in your Dashlane Business account.