Mapping Windows Active Directory groups to CAE

Use Windows Active Directory to manage user accounts and to access network resources. Active Directory Users are authenticated against Active Directory Windows Groups. To let Windows Active Directory groups access Cybersecurity Admin Expert (CAE), define the Windows Active Directory domain and groups and map them into roles defined in CAE.

To map Windows Active Directory groups to CAE:

  1. In CAE, go to Security Settings > Authentication Configuration.

  2. From the Centralized authentication protocol drop-down menu, choose LDAP.

  3. Under LDAP Protocol Details, configure the following settings:

Setting Description
Domain Enter the Windows Active Directory domain name.
IP address Enter the IP address of the Windows Active Directory server.
Port

Enter the port number used by the Windows Active Directory server to establish a connection with the Security Application:

  • By default, TCP and UDP ports are set to 389.

  • Or set TCP and UDP ports to 636 for LDAPS (LDAP over SSL).
Group Enter the name of one or more Windows Active Directory groups, then select Add a new Group.
Role(s) One or more roles can be associated with each group. Select or clear the Role(s) checkboxes.