Unable to view LDAP Users after adding a new identity source in Authentication Manager

[hqtaclab]

Hi,

I'm running RSA Authentication Manager 8.2 and I have followed the instructions here (000033238 - How to create an external LDAP Identity Source in RSA Authentication Manager 8.1 SP1 or later ) to add the identity source (MS Active Directory) and link the system to the identity source. However, I'm unable to view/manage users under IDENTITY-->USERS-->MANAGE EXISTING in security console. Any help would be appreciated.

Note:

1. This is a brand new deployment. 

2. The LDAP Identity source connection was successful.

3. I did select the correct security Domain and Identity Source when running the search. (Under IDENTITY-->USERS-->MANAGE EXISTING)

Thanks!

[JamesMandelbaum]

Hello,

This is a three step process:

• Add the identity store in the Operations Console
• Enable the Identity Store in the Security Console
• Logout and Login to the security console

That's all that is required to make them visible to the admin

[EdwardDavis]

On the operations console, set the user base dn to the top level of the domain, and the user search filter to (objectclass=user)&(objectcategory=person), then check. If this works, then you can go back and 'tighten the scope down' if top level and 'person' is too large a scope.

[hqtaclab · Accepted solution]

Thanks for the responses. All I had to do was Change the security domain to "System Domain" and all the users showed up. Apparently, all users are initially part of the default SystemDomain when the the external Identity source is added. You can then move them as needed to any other security domains. 

[_EricaChalfin]

RoSg1sDDJ6SoA1T9uu23F7CKEW9o6z560GlYwBcH4qY=‌,

Great news.  Thanks for reporting back.

Regards,

Erica