Connecting FortiClient EMS to an AD connector

Hi

i wondering, the thing is i need to intergrate and AD to Forticlient Cloud EMS, but am wondering where to install the AD connector, am thinking to install it on the Windows Server associated with the AD, but my windows Server is Lisening on a private IP, the AD connector should be installed on the device that is accessible by both the EMS and the AD how can i manuever this, which environment do you recommened i should install the AD connector

Thanks for your feedback