AD and CC-SG Overview

CC-SG supports authentication and authorization of users imported from an AD domain controller, without requiring that users be defined locally in CC-SG. This allows users to be maintained exclusively on the AD server. Once your AD server is configured as a module in CC-SG, CC-SG can query all domain controllers for a given domain. You can synchronize your AD modules in CC-SG with your AD servers to ensure that CCSG has the most current authorization information on your AD user groups.

Do not add duplicate AD modules. If your users see a message that says "You are not a member of any group" when attempting to login, you may have configured duplicate AD modules. Check the modules you have configured to see if they describe overlapping domain areas.

See Also

Remote Authentication

Authentication and Authorization (AA) Overview

Distinguished Names for LDAP and AD

Specifying Modules for Authentication and Authorization

Establishing Order of External AA Servers

Adding an AD Module to CC-SG

Editing an AD Module

Importing AD User Groups

Synchronizing AD with CC-SG

Renaming and Moving AD Groups

Setup SSO with Integrated Windows Authentication

About LDAP and CC-SG

Add an LDAP (Netscape) Module to CC-SG

About TACACS+ and CC-SG

Add a TACACS+ Module

About RADIUS and CC-SG

Add a RADIUS Module