AuthAnvil On-Demand can synchronize all of your users from Active Directory(s) by using DirSync.
Its simple and quick to do a bulk import of all your users from Active Directory. From there you can easily provision and activate (or deactivate) your employees as needed. See this article for more information on configuration.
Note: This agent can be deployed on multiple AD domains.