You can have a look at Administrative Bulk Operations. That should have some clues.
If AD means windows active directory, i would avoid it unless you are already deeply committed to it. I think there might be some thing that will let you use it as sso, but you’d have to pay me lots I money to find out about it.