Sync Rules
Use sync rules to determine how AD changes are reflected in the portal
Written by Owen Parry
Updated at September 12th, 2026
Table of Contents
Sync Rules
Sync Rules determine how changes made in AD are reflected in CyberFOX Password Manager. The Sync rules are configured in the CyberFOX Password Manager Portal by editing your Active Directory Connector.
The same sync rules are available for the Active Directory Connector and the Azure Active Directory Connector.
When a new user account is synced from Active Directory to CyberFOX Password Manager
- Create a user account in CyberFOX Password Manager. This is the recommended setting and will work best for most businesses.
- Create a pending user account in CyberFOX Password Manager that an admin must approve. When this setting is chosen, the new accounts will remain pending until an admin manually approves the accounts in the CyberFOX Password Manager Portal.
When a user account is deleted from the Active Directory
- Disable the user account in CyberFOX Password Manager. This is the recommended setting and will work for most businesses. Note: Accounts cannot be automatically deleted from CyberFOX Password Manager via the Active Directory Connector. This is a safety mechanism to avoid accidentally deleting CyberFOX Password Manager accounts if an AD error occurs.
- Remove the user from your account and convert the user to a personal account. This setting will generally only be useful for businesses where users use their personal email addresses for their CyberFOX Password Manager accounts.
When a user account is disabled in the Active Directory
- Disable the user account in CyberFOX Password Manager. This is the recommended setting and will work for most businesses.
- This setting will generally only be useful for businesses where users use their personal email addresses for their CyberFOX Password Manager accounts.
When an Active Directory account is removed from syncing to CyberFOX Password Manager
- Disable the user account in CyberFOX Password Manager. This is the recommended setting and will work for most businesses.
- Remove the user from your account and convert the user to a personal account. This setting will generally only be useful for businesses where users use their personal email addresses for their CyberFOX Password Manager accounts.