Yes, the Active Directory connector can run on the Virtual Appliance (VA). The VA is responsible for hosting connectors that communicate with various target systems, including Active Directory. The connector establishes the communication between IdentityNow and the target Active Directory instance for operations such as provisioning, deprovisioning, and account synchronization. The VA acts as the bridge between IdentityNow's cloud service and the on-premises AD environment, enabling secure communication through the connector.
Reference:
SailPoint IdentityNow Active Directory Connector Configuration Guide.
SailPoint IdentityNow Virtual Appliance Architecture and Setup Documentation.