Integration with Active Directory (AD). Authorization

What this solution does

This module enables integration with LDAP (Microsoft Active Directory) to authenticate users in '1C-Bitrix' systems (Start edition and higher). It allows the use of corporate AD credentials, simplifying portal creation and access management without requiring upgraded platform versions or creating duplicate user accounts.

Important: The module is logically incompatible with the standard authentication component. Using both simultaneously will result in login attempts using outdated local credentials. Continuous network connectivity to the domain controller is required during the authentication process.

User synchronization is not performed in full. Verification and account creation in the system occur only at the moment of a specific user's first login. Role management is handled using standard platform tools. If a user is deleted, disabled, or blocked in Active Directory, their account remains in the system, but login under that account becomes impossible.

The Active Directory integration module verifies the login and password pair at every connection attempt. If AD confirms the credentials, the user is authorized.

If the user does not exist locally, the module creates a local user account and logs them in. A random password is generated for this account but is not used during authentication.

The Active Directory user account must contain an email address. If this field is missing, a placeholder value is inserted into the local Bitrix user database.

Changing a password directly within the Bitrix interface does not update the password in Active Directory. Access via the domain account is possible only when using valid domain credentials.

General iT can install and configure this module and check how it works on your website.