Identity Connect

Identity Connect integrates Microsoft Active Directory (AD) user accounts with Salesforce user records. When a user account is created or updated in AD, Identity Connect pushes those updates to the Salesforce user record seamlessly and instantaneously. For example, when a user is created in AD, the Salesforce user record is created as part of the provisioning process. When deprovisioned, the user’s Salesforce session is revoked immediately. You can also use Identity Connect for single sign-on to Salesforce.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available for an additional cost in: Enterprise, Performance, and Unlimited Editions. Developer Edition includes 10 Identity Connect permission set licenses.

Identity Connect runs as a service on either Windows or Linux platforms.