topic Re: Restrict a category using LDAP in Active IQ Unified Manager Discussions

Restrict a category using LDAP

JamesIlderton — Wed, 04 Jun 2025 21:52:22 GMT

I would like to restrict a category using an LDAP group or users, but the UI only presents local users. Does anyone know if this is possible?

Re: Restrict a category using LDAP

geringer — Mon, 07 Mar 2016 22:30:03 GMT

James,

You can use Microsoft LDAP integration to define groups in each of the role categories of "Administrator","Architect","Operator" and "Guest". Select "WFA Configuration" in the "Administration" menu. The configuration is setup in the "Autjentication" tab. Be aware that a user will need to login to WFA before you can add them to a category. This setup will allow you to use active Directory groups to manage user access to WFA roles only.

Mike

Re: Restrict a category using LDAP

sinhaa — Tue, 08 Mar 2016 10:43:04 GMT

@geringer @JamesIlderton

Be aware that a user will need to login to WFA before you can add them to a category

====

This is a major limitation and can totally defeat the purpose of restricted Category login. To overcme this, I've a solution. See here.

Its a very simple workflow and works totally fine with sAMAccountName and UserPrincipalName. If you have any questions or need any variation, kindly post it on that thread.

sinhaa