Installation of Provisioning Agent

Question

Hi,

We are using API-Driven Provisioning applications to Provision the users into Active Directory For that we have to install a Provisioning agent on a server where AAD Connect sync is running.

Que is -

1. Can we install the Provisioning agent on the same server where AAD connect Sync (Microsoft Entra Connect Sync) is configured and running? Recommended approach?
2. Are there any dependencies on AAD connect or Microsoft Entra Connect Sync to install the a the Provisioning agent? for example there is a dependency on :
   1. Microsoft Entra Connect Sync with build version 2.2.8.0 or later.... or Required to synchronize some attributes

Answer 1

Hi Khedkar, Vidisha

Thanks for using the Q&A platform.

Yes, you can install the Microsoft Entra Provisioning Agent on the same server where Microsoft Entra Connect Sync is running. Kindly ensure the server has sufficient resources (CPU, memory, network) because both services can be resource-intensive.

Dependencies/Requirements:

• You must have .NET Framework 4.7.2 or higher installed.
• Outbound access on port 443 must be allowed for the agent to communicate with Microsoft Entra ID.
• API-driven provisioning might require specific attributes (like userPrincipalName, objectId, or onPremisesImmutableId) to be synchronized to Microsoft Entra ID. Make sure those attributes are part of your current sync configuration.

Find https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-install

If the response was helpful, please feel free to mark it as “Accepted Answer” and consider giving it an upvote. This helps others in the community as well.

Regards,

Obinna