---
metadata:
  - name: generator
    content: Diplodoc Platform v5.50.6
alternate:
  - https://ytsaurus.tech/docs/en/admin-guide/identity-sync.md
  - https://ytsaurus.tech/docs/ru/admin-guide/identity-sync.md
---
> **Documentation Index:** Fetch the complete configuration index at https://ytsaurus.tech/docs/en/llms.txt

<!-- source: en/_includes/admin-guide/identity-sync.md -->
# Users and groups synchronization

Sometimes it is required to keep users and group lists in sync with an external system. There is an app [ytsaurus-identity-sync](https://github.com/ytsaurus/ytsaurus-identity-sync) which might help when such an issue arises. The application periodically collects users, groups and memberships from the external system and updates YTsaurus users and groups accordingly.

{% note warning %}

The `ytsaurus-identity-sync` application only allows synchronization in one direction — from an external source to the YTsaurus system. Reverse synchronization from YTsaurus to an external system is not supported.

{% endnote %}

The application supports importing users and groups from the two sources:
- Microsoft Entra (previously Azure Active Directory) via [Microsoft Graph REST API](https://learn.microsoft.com/en-us/graph/azuread-users-concept-overview).
- [Lightweight Directory Access Protocol (LDAP)](https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol).

More information on installation and configuration can be found in [application README](https://github.com/ytsaurus/ytsaurus-identity-sync?tab=readme-ov-file#installing).

## See also

- [Managing users, groups](https://ytsaurus.tech/docs/en/admin-guide/cluster-operations.md#managing-users,-groups-and-access-controls) — this section describes the YTsaurus' users and groups manual management.
<!-- endsource: en/_includes/admin-guide/identity-sync.md -->