Identity Connect integrates Microsoft Active Directory (AD) user accounts with Salesforce user records. When a user account is created or updated in AD, Identity Connect pushes those updates to the Salesforce user record seamlessly and instantaneously. For example, when a user is created in AD, the Salesforce user record is created as part of the provisioning process. When de-provisioned, the user’s Salesforce session is revoked immediately. You can also use Identity Connect for single sign-on to Salesforce.
Salesforce Help Article – https://help.salesforce.com/articleView?id=sf.identityconnect_about.htm&type=5
To download, go to Identity Connect in Setup.
1. It helps to keep users in Sync between your AD and Salesforce. No need to manually deactivate the users.
2. When a new user is added, we can configure Profile and Permission Sets.