Looking to confirm … Can 2 separate accounts be used in the AD connector? Read Only for aggregation Admin for provisioning We’re working on configuring Active Directory with a Read Only service account for aggregation with a separate Admin service account for IQService. The IQService account is…

From my experience, this is not possible. The service account configured under the Domain Settings of the source will be used for all aggregation and provisioning activities. The IQService User in the IQService Settings is used only for the TLS communication. You can actually see in verbose IQServic…

Based on this IQService Security Considerations (sailpoint.com) Which account is registered with the IQ Service? Alicia

@agutschow We only have the “Admin” account registered with IQService. This is also the same account that is configured in the Services as the “log on as” user. The Read Only account is only configured in the Domain settings page (Forest settings is “blank”). The Admin account is configured in t…

They are also used for before/after provisioning rules. @edmarks , have you considered using gMSA? https://developer.sailpoint.com/discuss/t/enhancement-microsoft-active-directory-connector-group-managed-service-accounts-gmsa-as-service-account-and-security-layer-sasl-authentication-protocol/70483 …

AD / IQService Separate Accounts

Identity Security Cloud (ISC) ISC Discussion and Questions

edmarks (Ed Marks) July 23, 2024, 7:38pm 6

re: gMSA - Not at this client because they’re on the prior version of IQService yet. I’m aware of this as a new option in the latest IQService so we’ll be talking with them about that going forward.

Topic		Replies	Views
Service Account Active Directory ISC Discussion and Questions identity-security-cloud , connectors , active-directory	4	73	April 1, 2026
Service account for IQService ISC Discussion and Questions identity-security-cloud , iqservice	2	185	June 22, 2025
Using Same IQService for Different AD Integration with diff Service Account ISC Discussion and Questions identity-security-cloud	4	84	September 23, 2025
ISC - AD Connector - Integration with GMSa Account ISC Discussion and Questions identity-security-cloud , connectors , iqservice	4	560	December 18, 2024
Pros and cons of using AD connector without iqservice? ISC Discussion and Questions identity-security-cloud	3	649	May 17, 2024

AD / IQService Separate Accounts

Related topics