Connecting to your company directories
    You can connect 
BlackBerry UEM
 to your organization's company directory to take advantage of the following features:
      - You can create user accounts inUEMusing user data from the directory, andUEMcan authenticate administrators for the management console and users forBlackBerry UEM Self-Service.
- You can link company directory groups withUEMgroups to organize users in the same way that they are organized in your company directory, and to simplify the assignment and management of IT policies, profiles, and apps for users. These are called directory-linked groups.
- You can enable onboarding for specific groups in your company directory to createUEMusers automatically. These are called onboarding directory groups. When you add new users to these directory groups, new user accounts are created for these users inUEM. If you enable onboarding, you can also configure offboarding to delete device data andUEMuser accounts when users are disabled or removed from the company directory.
If you do not connect 
UEM
 to a company directory, you can manually create local user accounts and authenticate administrators using default authentication.| Step | Action | 
|---|---|
|  | In a  UEMon-premises environment, Connect to a Microsoft Active Directory instance or Connect to an LDAP directory. In a  UEM Cloudenvironment, install and configure the BlackBerry Connectivity Node to connect to your company directory. For instructions for connecting  UEMon-premises or UEM Cloudto Entra ID, see Connect BlackBerry UEM to Entra ID to create directory user accounts. | 
|  | Optionally, Enable directory-linked groups. | 
|  | Optionally, Enable and configure onboarding and offboarding. | 
|  | Optionally, configure directory synchronization. |