Do I need to synchronize individual users from Active Directory or LDAP?

No, AtScale has a feature where you can map a group from Active Directory to a specific role.

Users of the AD group will be able to access Runtime privileges assigned to this role, so individual sync is unnecessary.