How to use SearchFilterForAccounts when configuring an RSA Via Lifecycle & Governance Authentication Source

[#1]

Article Number

000033275

Applies To

RSA Product Set: RSA Via Lifecycle and Governance (RSA Via L&G)
RSA Version/Condition:  7.0 and lower

Issue

Authentication Source configuration (i. e., Authentication type=Account Collector) provides the ability to specify an account filter field, such as SearchFilterForAccounts, to limit who can log in but does not document how to create a valid filter.

Go to Admin > System > Authentication tab > Create Authentication Source.

Image description

 

Image description

 

Resolution

The filter needs to contain a %v placeholder for the account name. For example, a valid SearchFilterForAccounts might look like:
 

(&(sAMAccountName=%v)(objectclass=user)(memberof=CN=users,ou=marketing,dc=yourcompany,dc=com))

Image description

Notes

Help information on how to specify a SearchFilterForAccounts filter will be included in a future release.