Yes. MyCena installs as a software overlay above existing Active Directory infrastructure. Active Directory continues to govern group policies, user management, and access permissions. MyCena sits above AD as the credential generation and injection layer — it does not replace AD, modify it, or require changes to your AD schema.

From AD's perspective, user accounts continue to exist as normal. MyCena intercepts the credential injection layer — when an employee authenticates to any AD-connected system, MyCena provides the credential automatically. The AD authentication succeeds normally. The employee never sees the password that AD has accepted.