Troubleshooting: Cannot Add Groups to Role Based Access Control

Version Affected: All
 
 

Overview

When trying to retrieve a list of groups for Role Based Access Control, not all groups are shown, and searching for a specific group returns "No Results found."

 

Cause

Active Directory (AD) limits searches to 1,000 results by default. This is tracked as Defect ID EE-623, scheduled for a fix in version 20.x. In the meantime, the workaround below resolves the issue without changing the AD defaults.

 

Resolution:

If the AD structure allows it, change the connection string to connect at a sub-organizational unit (OU) so fewer group results are returned:

1. Go to the SecureAuth0 Data tab.
2. Set the connection string to LDAP://example.domain.com/OU=Admin,DC=Example,DC=Domain,DC=com.
3. Save the setting.

As long as the groups and users exist in the Admin OU or below, this reduces the number of groups returned to fewer than 1,000 and resolves the issue.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.