Here is a high-level description of how silver level integration works for adding a new user. For an illustration see Silver Level Integration with Active Directory Services.
Provisioning:
Authentication:
A user attempts to log in (as a client of the TSAPI Service).
The user is authenticated against Windows Active Directory services based User Management.
User permissions are derived from the AE Services SDB (which is created by virtue of either double-entry or synchronization).