For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Oreoluwa's avatar
Oreoluwa
Icon for Altocumulus rankAltocumulus
Sep 16, 2020

AD QUERY FOR APM POLICY

Hi, How can i specify the group a user must be a member of in the AD query component of the APM policy on the F5. It seems like there has to be a format for the specification of the group on the AD q...
Azure
BIG-IP Access Policy Manager (APM)
cloud
Yoann_Le_Corvi1's avatar
Yoann_Le_Corvi1
Icon for Cumulonimbus rankCumulonimbus
Sep 16, 2020

Hi,

 

Are you talking about the Branch Rule ?

Normally, in the AD Query, you can create a Banch Rule that sets :

Context: AD Query

Condition: User is Member Of

DN: CN=MY_GROUP, CN=Users, DC=MY_DOMAIN

 

It should be really straighforward.

 

Yoann

  • Oreoluwa's avatar
    Oreoluwa
    Icon for Altocumulus rankAltocumulus
    Sep 16, 2020

    Yes i know this format of the AD query is what is default on the F5 APM however, it does not work. That is, the users in the group i specified in this DN are not seeing what they are expected to see on their portal access. They still what every other user sees on the webtop.