LDAP Groups

The Group mapping feature is used to map LDAP/Active Directory groups to Ad Astra roles. When a user is authenticated, their group membership information is used to determine appropriate permissions.

To map groups to roles:

1. Open the LDAP configuration page under the Settings tab.

2. Click Add LDAP Group.

3. Provide the LDAP administrator user name and password.

4. Enter fully qualified path for the search.

5. Enter the name filter for the search.

6. This field automatically adds wild cards for a partial name search.

7. Click Find LDAP Group.

8. A list of matching groups is returned.

9. Select a group from the list.

10. Click the Save LDAP Group

11. A list of all Ad Astra roles is returned.

12. Place a check in the boxes next to role(s) to which the LDAP group should be mapped.

13. Click Save to add the group-to-role association to the list.

14. Repeat as needed.

15. You may expand individual groups on list page to review the association.