AnsweredAssumed Answered

Unable to view LDAP Users after adding a new identity source in Authentication Manager

Question asked by hqtac lab on Feb 9, 2018
Latest reply on Feb 12, 2018 by Erica Chalfin

Like • Show 0 Likes0
Comment • 4

Hi,

I'm running RSA Authentication Manager 8.2 and I have followed the instructions here (000033238 - How to create an external LDAP identity source in RSA Authentication Manager 8.1 SP1 or later ) to add the identity source (MS Active Directory) and link the system to the identity source. However, I'm unable to view/manage users under IDENTITY-->USERS-->MANAGE EXISTING in security console. Any help would be appreciated.

Note:

1. This is a brand new deployment.

2. The LDAP Identity source connection was successful.

3. I did select the correct security Domain and Identity Source when running the search. (Under IDENTITY-->USERS-->MANAGE EXISTING)

Thanks!

hqtac lab Feb 12, 2018 2:05 PM

Correct Answer

Thanks for the responses. All I had to do was Change the security domain to "System Domain" and all the users showed up. Apparently, all users are initially part of the default SystemDomain when the the external Identity source is added. You can then move them as needed to any other security domains.

See the reply in context

No one else had this question

Outcomes

James Mandelbaum

Feb 9, 2018 6:37 PM

Hello,

This is a three step process:

Add the identity store in the Operations Console
Enable the Identity Store in the Security Console
Logout and Login to the security console

That's all that is required to make them visible to the admin

Actions

Edward Davis

Feb 12, 2018 8:04 AM

On the operations console, set the user base dn to the top level of the domain, and the user search filter to (objectclass=user)&(objectcategory=person), then check. If this works, then you can go back and 'tighten the scope down' if top level and 'person' is too large a scope.

Actions

hqtac lab Feb 12, 2018 2:05 PM

Actions

Erica Chalfin

@ hqtac lab on Feb 12, 2018 2:44 PM

hqtac lab,

Great news. Thanks for reporting back.

Regards,

Erica

Actions

4 Replies

James Mandelbaum Feb 9, 2018 6:37 PM
Mark Correct
Correct Answer
Hello,

This is a three step process:
- Add the identity store in the Operations Console
- Enable the Identity Store in the Security Console
- Logout and Login to the security console
That's all that is required to make them visible to the admin
Like • Show 1 Like1
Actions
Edward Davis Feb 12, 2018 8:04 AM
Mark Correct
Correct Answer
On the operations console, set the user base dn to the top level of the domain, and the user search filter to (objectclass=user)&(objectcategory=person), then check. If this works, then you can go back and 'tighten the scope down' if top level and 'person' is too large a scope.
Like • Show 1 Like1
Actions
hqtac lab Feb 12, 2018 2:05 PM
Unmark Correct
Correct Answer
Thanks for the responses. All I had to do was Change the security domain to "System Domain" and all the users showed up. Apparently, all users are initially part of the default SystemDomain when the the external Identity source is added. You can then move them as needed to any other security domains.
Like • Show 1 Like1
Actions
- Erica Chalfin @ hqtac lab on Feb 12, 2018 2:44 PM
  Mark Correct
  Correct Answer
  hqtac lab,
  
  Great news. Thanks for reporting back.
  
  Regards,
  Erica
  Like • Show 0 Likes0
  Actions

Unable to view LDAP Users after adding a new identity source in Authentication Manager

Outcomes

Related Content

Recommended Content