Active Directory Sync

Keep 3CX users in step with Active Directory.

Active Directory Sync connects to Microsoft Active Directory over LDAP and updates 3CX on a schedule you set. It adds extensions for new users, keeps names, mobile numbers and emails current, and disables or deletes extensions for people who have left.

Get the VoIPTools Subscription Schedule a live demo

LDAP connection to Active Directory
Scheduled or on demand
Archive voicemails and recordings first

Active Directory Sync Synchronization screen with the Active Directory, Exclude Extensions, User Maintenance and Extension Update Schedule sections. User Maintenance is open with Disable/Delete Extension, Add Missing Extensions From Active Directory, Add Extensions To 3CX Groups using the Department field, and Create Missing Group

What happens at each sync

Stop setting up phones by hand for every new hire.

Your directory already knows who works here. On the schedule you set, Active Directory Sync compares the users in Active Directory with the extensions in 3CX and handles the differences.

Someone joins
Their extension is created.
Add them to Active Directory with their extension number. At the next sync their 3CX extension is created, joins 3CX groups based on an Active Directory field, and can take its settings from a template extension.
No more: creating each extension by hand
Details change
3CX follows the directory.
Update a first or last name, mobile number or email address in Active Directory, and the 3CX extension is updated at the next sync.
No more: typing the same details in twice
Someone leaves
Their access is removed.
At the next sync their extension is disabled or deleted, whichever you choose. Their voicemails and recordings can be archived to an extension you pick first.
No more: a leaver's extension that still works

Where it helps

For organizations that run on Active Directory.

Busy IT teams

Let the directory drive extension changes, instead of maintaining 3CX users one at a time.

Departments and teams

Extensions join 3CX groups based on an Active Directory field such as Department, and missing groups can be created.

Growing companies

The process stays the same whether you have a small team or a large one. Only the directory grows.

IT and security teams

Make sure a leaver's extension is disabled or deleted, with their voicemails and recordings archived first.

Schedule and log

It runs when you want and records what it did.

Choose when the sync creates, updates and deletes extensions. The event log records what happens when it runs.

FrequencyRun the sync every set number of minutes.
Time of dayRun it at a time of day you pick.
On demandClick Run Now to update right away.
Event logSee each event with its date, type and details. Export to PDF, Excel or CSV, or clear the log.

Extension Update Schedule with the Schedule Type options Frequency, Time of Day and On Demand, set to Frequency every 1 minute

Pick Frequency, Time of Day or On Demand.

Event Log with Date, Type and Event columns, filter fields, and PDF, Excel, CSV and Clear buttons

The event log, with PDF, Excel and CSV export.

Active Directory Sync is included in the VoIPTools Subscription.

One subscription gets you Active Directory Sync and 30+ other add-ons for 3CX.

Get the VoIPTools Subscription Schedule a live demo

Also included

Control over what syncs, and how it looks.

Exclude extensions

Leave specific extensions out of the sync by name.

Organizational units

Add organizational units, each with an optional template extension whose settings are applied to new extensions.

Sign-in options

Custom Branding

Add your logo and header title prefix, and set the header and grid colors.

Everything in Active Directory Sync

Automated sync with Microsoft Active Directory over LDAP
User provisioning: add missing extensions from Active Directory
Access revocation: disable or delete extensions no longer in Active Directory
Scheduled runs by frequency, time of day or on demand
Voicemail archiving to an extension you choose
Recording archiving to an extension you choose
Group mapping from an Active Directory field
Create missing 3CX groups
First and last name, mobile number and email kept consistent
Choose which Active Directory field holds the extension number
Organizational units with an optional template extension
Exclude extensions by name
Event logging with PDF, Excel and CSV export
Custom Branding
Web portal for extensions with Manager rights

Questions

Active Directory Sync questions, answered.

Anything else? Our team answers 24/7 from the USA, India and the Philippines.

Does it work with Microsoft Entra ID (Azure AD)?+

The documentation covers Microsoft Active Directory reached over LDAP. It does not mention Microsoft Entra ID, formerly Azure AD, so please ask us about your setup before you buy.

How does it connect to Active Directory?+

Over LDAP. You enter the domain and the username and password of an Active Directory account, then click Test to check the connection.

Does it update 3CX the moment something changes in Active Directory?+

No. It runs on the schedule you set: every set number of minutes, at a set time of day, or on demand with Run Now.

What happens when someone leaves?+

At the next sync, their extension is disabled or deleted, whichever you choose. If you choose neither, it is deleted. You can have their voicemails and recordings archived to an extension you pick first.

Which details are kept in step?+

First and last name, mobile number and email address. You choose which Active Directory field holds the extension number and which one holds the group.

Can we leave some extensions out?+

Yes. Add the extension names you want to exclude and they are filtered out of the sync.

Who can use it?+

Extensions with Manager rights. Sign in with your 3CX extension and your voicemail PIN, a web client password or a phone password.

Will it work with my 3CX?+

Active Directory Sync works with 3CX version 20. It runs alongside 3CX on its own Windows machine and connects through the VoIPTools Relay. Ask us and we will confirm your setup.

Details

Requirements, updates and documentation.

Downloads and documentation

3CX version 20
Microsoft Active Directory, reachable over LDAP, and an Active Directory account to connect with
A Windows 10 or later, or Windows Server 2012 or later, machine for Active Directory Sync, running alongside 3CX
The Windows web server role (VoIPTools configuration) and .NET Framework 4.7.2
Microsoft SQL Server 2016 or later (the free Express edition works), on the same machine or a remote server
VoIPTools Relay on your 3CX server (TCP port 8801) and the VoIPTools Universal Updater
Static IP addresses for the VoIPTools and 3CX servers, with port 7550 open. HTTPS is recommended and needs a domain name (FQDN) and an SSL/TLS certificate.

Check the documentation for the current release and full setup details for your environment.

Got a question?

Talk to the team that builds Active Directory Sync.

Whether it is Active Directory Sync, another add-on, or a custom solution built around your needs, we can help you get the most out of 3CX.

Already a customer? For help with an install or an issue, email Support@VoIPTools.com.

Keep exploring

More add-ons for admin and integration.

Active Directory Sync and every add-on below come in the same VoIPTools Subscription.

Browse all 35 add-ons

Admin and integrationExporterAutomatically copy 3CX call records and data into SQL Server, MySQL or PostgreSQL for your own reporting.See the add-on Admin and integrationMonitorTrace any call step by step through menus, queues, transfers and voicemail to see exactly what happened.See the add-on Admin and integrationHosted BillingPull extension counts and storage use from every hosted 3CX system for monthly billing, without logging into each one.See the add-on

Let your directory keep 3CX up to date.

See it on a live demo, or get it today as part of the VoIPTools Subscription, with 30+ other add-ons included.

Schedule a live demo Get the suite