Reference Guide
...
LDAP/Active Directory Integrat...
Adding Users Automatically
kron pam runs the (ldapdatacollector) job periodically to synchronize users and user groups from the active directory this job applies the changes made to the active directory since the latest sync to kron pam this process causes any user who has left the company to be directly removed from kron pam and also allows kron pam to get any new user’s credentials quickly, as long as these changes were applied to the active directory the automated job period can be changed by editing the cron expressions field in the job scheduled window