Description:

This step creates a new Active Directory user account.

The Create Active Directory User workflow step connects to Microsoft Active Directory using a configured LDAP connection and creates a new user account with the specified username, first name, last name, and email address.

The step automates user provisioning by creating the user object in Active Directory, allowing organizations to integrate identity management into employee onboarding, HR systems, self-service portals, and other business workflows.

This step provides an efficient way to automate user account creation while ensuring consistent user information and reducing manual administrative effort.

The step supports:

• Active Directory user account creation
• Configurable LDAP connections
• User provisioning with username, first name, last name, and email address
• Dynamic user information using workflow variables
• Integration with Microsoft Active Directory

This step can be used for:

• Employee onboarding
• User provisioning
• HR system integration
• Identity lifecycle management
• Self-service user registration
• Access management
• Business process automation

Usage:

The Create Active Directory User step is typically placed during employee onboarding, self-service registration, or user provisioning workflows.

The workflow creates the specified Active Directory user using the configured LDAP connection.

A typical workflow might look like this:

Once the user account has been created, later workflow steps can:

• Add the user to Active Directory groups
• Enable the user account
• Update additional user attributes
• Synchronize identity systems
• Notify administrators
• Generate audit reports
• Continue identity lifecycle management processes

You need to set up an LDAP connection before using this step.

Go to:

Integration → Connections → Generic Connections

On the Manage Generic Connections page, click:

Actions → Create

Configure an Active Directory connection before using this workflow step.

A sample connection is provided here for reference. 

Example:

Let’s build and execute the “clsCreateADUserDef” example:

• Create a new process definition named “clsCreateADUserDef” and open it in the designer. 
• Drag a “clsCreateADUser” step to the canvas.
• Connect the dots between the “Start” and “clsCreateADUser” steps.
• Click the "clsCreateADUser" step to configure its "Required" properties. Provide a name for the step. Select the LDAP connection from the drop-down list. Enter the “Username, Firstname, Lastname, and Email”. Click Save. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• The “Logging” configuration is necessary for documentation and for measuring workflow progress and percent complete. This is done by configuring the step state and percent fields individually, as shown in the images below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Create User step, FlowWright connects to the configured Active Directory server using the selected LDAP connection and attempts to create the specified user account. If the operation completes successfully, the workflow follows the Created return path. If the username already exists, the required information is invalid or incomplete, or the LDAP connection cannot be established, the workflow follows the NotCreated return path. 

• Click the process step to view its properties. The step should create the specified Active Directory user account and return Created upon successful completion. Use the Read User workflow step to verify that the user account was created successfully, or continue with Add Users To Group to assign the user to the appropriate Active Directory groups.

Tips:

• Verify that the LDAP connection has been configured before using this step.
• Ensure that the LDAP account has permission to create Active Directory user objects.
• Verify that the specified username does not already exist.
• Ensure that the first name, last name, and email address meet your organization's naming standards.
• Use workflow variables to dynamically populate user information.
• Use the Created and NotCreated return paths to implement appropriate success and error handling.
• Combine this step with Enable User, Add Users To Group, Update User Attributes, Get User Groups, or Send Email workflow steps to automate complete Active Directory user provisioning workflows.

Notes:

• A valid LDAP connection must exist before this step can execute.
• The configured LDAP account must have sufficient permissions to create Active Directory user objects.
• The username should be unique within the Active Directory domain.
• Required user information must be supplied before the workflow executes.
• Additional attributes not exposed by this step can be configured using the Update User Attributes workflow step.
• Network connectivity or authentication issues may prevent the user account from being created.
• The workflow should include appropriate error handling for the NotCreated return path.
• The workflow result depends on the current state of Active Directory and the permissions granted to the configured LDAP connection.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• LDAP connection
• Username mapping
• First name mapping
• Last name mapping
• Email address mapping
• Workflow variable mappings
• Active Directory permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.