2016-03-07 02:30 PM
You can use Microsoft LDAP integration to define groups in each of the role categories of "Administrator","Architect","Operator" and "Guest". Select "WFA Configuration" in the "Administration" menu. The configuration is setup in the "Autjentication" tab. Be aware that a user will need to login to WFA before you can add them to a category. This setup will allow you to use active Directory groups to manage user access to WFA roles only.
2016-03-08 01:41 AM - edited 2016-03-08 02:43 AM
Be aware that a user will need to login to WFA before you can add them to a category
This is a major limitation and can totally defeat the purpose of restricted Category login. To overcme this, I've a solution. See here.
Its a very simple workflow and works totally fine with sAMAccountName and UserPrincipalName. If you have any questions or need any variation, kindly post it on that thread.