You are viewing limited content. For full access, please sign in.

Question

Question

AD Group authentication in LF Forms (RIO 10.1) not working

asked on July 5, 2016 Show version history

Hi,

In LF Forms (10.1 RIO), I want to be able to provide access rights to an AD group as Submitter to submit requests and send approval tasks to another AD Group setup as a Team. Is it possible?

I think so (it works in Avante) but I am not able to find an option in RIO. It only shows LF Groups but not AD Group.

In LFDS, under Accounts --> Groups, there is no way to add an AD Group, the only thing I can do is create a LF Group and add AD users. And under Accounts --> AD users, I tried to lookup an AD group but no luck there I can only add AD Users.

In LFDS--> Settings--> Identity providers, I have enabled Active Directory synchronization with a group and it brings all users belonging to a particular AD group and assigns full license.

To conclude, I couldn't find a way to add AD Groups to LF Forms in

LF Forms --> Administration --> System Security

LF Forms --> Process --> Access Rights

LFDS --> Accounts --> Groups

LFDS --> Accounts --> Users

Thanks,

Adarsh

0 0

Answer

APPROVED ANSWER
replied on May 9, 2019

10.4 does have the ability to add AD groups as members of LFDS groups --- the functionality was added in LFDS 10.0 Update 2 and had support on the Forms side in Forms 10.1 Update 3.

These LFDS groups can be used in Forms to grant access and security to members of the AD groups within that LFDS groups.

Two notes about this:

  1. The AD group itself is shown as a member of the LFDS group in the LFDS web admin. The users are not shown in that list
  2. If you grant that LFDS group access to Forms, the users within the AD group will be synced to Forms. The AD group itself will not

 

So only the users are shown in Forms, and only the group is shown in LFDS.

1 0

Replies

replied on July 6, 2016

Hi Adarsh,

You are correct; adding AD groups to LFDS is not currently supported. It's on our backlog to add this, as it will improve the Forms configuration process.

If there are other use cases aside from the fact that Forms does not support adding AD groups directly, we'd be happy to hear them so we can keep them in mind when working on this functionality.

The Admin Console, Client, and Web Access already support searching for and adding AD groups without the need to add them in LFDS.

0 0
replied on July 8, 2016

Hi Brianna,

Thanks for the update. I am surprised this isn't a feature yet. Any idea whether this will be in the next release?

Thanks,

Adarsh

 

0 0
replied on July 8, 2016

The current plan is to include it in the next release.

1 0
replied on July 8, 2016

Thanks for your response.

Regards,

Adarsh

0 0
replied on July 14, 2016

When you say next release, are you talking 11 next year or something sooner?

0 0
replied on July 19, 2016

What is the release schedule for this fix?

0 0
replied on July 20, 2016

We don't currently have a release date.

0 0
replied on May 9, 2019

Hello I am checking on thread as we are now able to use 10.4.  Is this issue resolved in this release?

 

Thanks,

Jeff Curtis

0 0
APPROVED ANSWER
replied on May 9, 2019

10.4 does have the ability to add AD groups as members of LFDS groups --- the functionality was added in LFDS 10.0 Update 2 and had support on the Forms side in Forms 10.1 Update 3.

These LFDS groups can be used in Forms to grant access and security to members of the AD groups within that LFDS groups.

Two notes about this:

  1. The AD group itself is shown as a member of the LFDS group in the LFDS web admin. The users are not shown in that list
  2. If you grant that LFDS group access to Forms, the users within the AD group will be synced to Forms. The AD group itself will not

 

So only the users are shown in Forms, and only the group is shown in LFDS.

1 0
replied on May 10, 2019

Thanks Brianna!!

 

Jeff Curtis

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.