> For the complete documentation index, see [llms.txt](https://docs.aohwv.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aohwv.dev/getting-started/09-set-up-provisioning.md).

# Step 8 — Set Up Provisioning

Create the Outbound Provisioning connector — the connector that writes identities and accounts out to your Entra ID or Active Directory target. This is the core of what AOH Sync does. Unlike the Account Import and Identity Ingestion connectors (created automatically when you add a Source or Target System), you create this connector deliberately. (\~5 minutes)

{% stepper %}
{% step %}
**Open Connectors and review the categories**

Navigate to **Connectors** in the left sidebar. The page shows three connector categories:

* **Identity Ingestion** — auto-created when you added your Target System; reads your directory's current state.
* **Account Import** — auto-created when you added your Source System; brings Account records into AOH Sync.
* **Outbound Provisioning** — what you are about to create; writes identities and accounts out to your target directory.

![Connectors page showing the three connector categories — Identity Ingestion, Account Import, and Outbound Provisioning — with auto-created connectors already listed in the first two categories](/files/HZruaSEcpoYTym1YG1Bt)

*The Connectors page after completing Steps 6 and 7. Identity Ingestion and Account Import connectors are already present. Outbound Provisioning is empty until you create one.*

Click **+ New Connector** to open the creation wizard.
{% endstep %}

{% step %}
**Step 1 of 4 — Choose your Source System**

Select the Source System this connector should read Account data from.

![New Connector wizard Step 1 of 4 showing a list of available Source Systems to choose from](/files/GenHClc6kpSV2gI1TSTk)

*Choose the Source System you connected in Step 6.*
{% endstep %}

{% step %}
**Step 2 of 4 — Choose your Target System**

Select the Target System this connector should provision identities into.

![New Connector wizard Step 2 of 4 showing a list of available Target Systems to choose from](/files/SxyC4fWSKnfhErSDq6eT)

*Choose the Target System you connected in Step 7.*
{% endstep %}

{% step %}
**Step 3 of 4 — Confirm connector details**

Review and confirm the connector name and settings. The **Display Name** is auto-filled based on your source and target selection.

The identity mode is set automatically from the target you chose. The identity-matching key is configured per attribute in the mapping editor after the connector is created.

If you selected an Active Directory target, you can optionally set a **Target OU Distinguished Name** to control which organisational unit provisioned accounts land in.

![New Connector wizard Step 3 of 4 showing the Display Name field (auto-filled) and an optional Target OU Distinguished Name field for Active Directory targets](/files/A8Gh1sL04G0c7im7P3hd)

*The Display Name is auto-filled. For Active Directory targets, set the Target OU Distinguished Name if you want provisioned accounts in a specific OU.*
{% endstep %}

{% step %}
**Step 4 of 4 — Set a schedule and create**

Optionally choose a **Sync Schedule** from the preset options, then review the summary and click **Create Connector**.

| Schedule option   | When the connector runs            |
| ----------------- | ---------------------------------- |
| Every 15 min      | Continuously throughout the day    |
| Every hour        | Once per hour                      |
| Daily 9 AM UTC    | Once per day at 9 AM UTC           |
| Weekdays 8 AM UTC | Monday through Friday at 8 AM UTC  |
| On-demand only    | Only when you trigger a manual run |

![New Connector wizard Step 4 of 4 showing the Sync Schedule dropdown with preset options and a Create Connector button](/files/UMx0F3YMaA63bolZTpoq)

*Choose a schedule, review the summary, and click Create Connector. You can change the schedule at any time from the connector's Schedule tab.*
{% endstep %}
{% endstepper %}

## How to check it worked

The new connector appears under **Outbound Provisioning** on the **Connectors** page.

## Related

* [Step 9 — Run Your First Sync](/getting-started/10-first-sync.md)
* [Connectors](/feature-reference/connectors.md)
* [Schedule](/feature-reference/connectors/schedule.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.aohwv.dev/getting-started/09-set-up-provisioning.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.