Hello,
I am currently configuring the identity store for ArcGIS Enterprie for the LDAP Connection. When I configure the identity store using an organizational unit (OU) as the base DN, everything works as expected. All users from that OU are correctly discovered and are available in the ArcGIS user management, where they can be selected and added without any issues.
However, my requirement is to restrict the available users to members of a specific Active Directory security group, for example an AD group called “ArcGIS”. The goal is that in the ArcGIS user management interface only users who belong to this AD group are shown and selectable for adding to Portal, instead of all users from an OU.
I tried the following configuration:
{
"type": "LDAP",
"properties": {
"userPassword": "PASSWORD",
"userSurnameAttribute": "sn",
"caseSensitive": "false",
"userGivenNameAttribute": "givenName",
"userEmailAttribute": "mail",
"usernameAttribute": "sAMAccountName",
"user": "CN=adreader,OU=user,,DC=company,DC=de",
"userFullnameAttribute": "cn",
"ldapURLForUsers": "ldaps://server.ldap.de:636/CN=arcgis,OU=Groups,DC=company,DC=de",
"isPasswordEncrypted": "true",
"userSearchAttribute": "sAMAccountName"
}
}
But nothing shows in the User Management. When i choose the ou Users for ldapURLForUser, i can see every User in that OU.
Any Idea? Is this even possible?
Thanks in advance
