LDAP (Active directory) Authentication for administrators

[soporteseguridad]

Hi,

Im trying to configure my PA to validate with my AD to can manage it. I have create a group in my Active Directory called (com_cos), this group has the user to manage the PA. I have add this group in Group mapping and Authentication profile (Allowlist) but it seems like the PA has any problem with the group in AD.

This is output error: User 'csg.es\as' failed authentication. Reason: User is not in allowlist From: 172.16.28.133.

I attach the config

Best regards,

Thanks

[Gururaj]

Hi,.

As per my knowledge,.. you can't create group based authentication (correct me if i am wrong), instead create a admin with the unique user name as in the AD. Below snaps shows the same.

Create a auth profile.

Create a  new administrator. In the below snap, Name : nithin is same as in the AD ( Name should match the user name in the AD)

Regards,

Gururaj