NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

Active IQ Unified Manager Discussions

Restrict a category using LDAP

JamesIlderton
3,733 Views

I would like to restrict a category using an LDAP group or users, but the UI only presents local users.  Does anyone know if this is possible?

1 ACCEPTED SOLUTION

sinhaa
3,698 Views

@geringer @JamesIlderton

 

Be aware that a user will need to login to WFA before you can add them to a category

====

 

This is a major limitation and can totally defeat the purpose of restricted Category login. To overcme this, I've a solution. See here. 

 

Its a very simple workflow and works totally fine with sAMAccountName and UserPrincipalName. If you have any questions or need any variation, kindly post it on that thread.

 

 

sinhaa

 

 

 

 

 

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

View solution in original post

2 REPLIES 2

geringer
3,720 Views

James,

     You can use Microsoft LDAP integration to define groups in each of the role categories of "Administrator","Architect","Operator" and "Guest".  Select "WFA Configuration" in the "Administration" menu.  The configuration is setup in the "Autjentication" tab.  Be aware that a user will need to login to WFA before you can add them to a category.  This setup will allow you to use active Directory groups to manage user access to WFA roles only.

 

Mike

sinhaa
3,699 Views

@geringer @JamesIlderton

 

Be aware that a user will need to login to WFA before you can add them to a category

====

 

This is a major limitation and can totally defeat the purpose of restricted Category login. To overcme this, I've a solution. See here. 

 

Its a very simple workflow and works totally fine with sAMAccountName and UserPrincipalName. If you have any questions or need any variation, kindly post it on that thread.

 

 

sinhaa

 

 

 

 

 

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.
Public