We have a requirement to manage the active directory accounts and groups from one identity manager. But there should not be a direct one identity manager to ad integration rather there should be one identity manager --> active roles --> active directory…