Azure AD Agent <--> Group assignment

Moderator: crythias

Locked
gob
Znuny newbie
Posts: 49
Joined: 18 Jan 2011, 15:45
Znuny Version: 3.0.4

Azure AD Agent <--> Group assignment

Post by gob »

Hi
I have been testing a configuration on a new install using Azure AD DS (Secure LDAP) as the authentication service for our agent accounts.
Agents can sign in using their Azure AD creds OK and I can assign Znuny group membership based on the members of an Azure AD group such as for the admin group.

I have created quite a comprehensive group structure and assigned agents to the groups in the Znuny admin interface. However when an agent logs out and back in again they only get the groups that are assigned through Azure and not any locally assigned groups. Also, it seems that only azure users can now log in and not any local accounts.

This may be by design I guess but would be handy if I can manage the group membership through the Znuny interface as it's much simpler to set up.

Any thoughts on that?
root
Administrator
Posts: 4250
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Azure AD Agent <--> Group assignment

Post by root »

Hi,

You have to make a decision: setting permissions via AuthSyncModule based on Azure AD group membership or manually. The AuthSyncModule resets the permissions every time. To prevent this you need to disable this feature.

- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
gob
Znuny newbie
Posts: 49
Joined: 18 Jan 2011, 15:45
Znuny Version: 3.0.4

Re: Azure AD Agent <--> Group assignment

Post by gob »

Thanks Roy. I thought as much.
I can at least still use Azure AD for Authentication and Znuny group management it would seem if I do not use Azure for any group membership.
I will stick with that for now.

Thank you
Locked