You are viewing limited content. For full access, please sign in.

Question

Question

Teams based on Active Directory Groups when using Microsoft Entra authentication

asked on October 21, 2024

In Forms 11, I want to set up some teams whose members are managed in Active Directory groups, but haven't been able to figure out how to do this. From things I've read, I believe this is theoretically possible, but that possibility seems to be dependent on the details of the installation.

We are running Forms version 11.0.2311.50564.

We recently set up Microsoft Forms to authenticate to Microsoft Entra, but our repository access still authenticates against Active Directory. Does our use of Entra for authentication prevent us from using Active Directory groups in Forms teams?

0 0

Replies

replied on October 21, 2024

I'm assuming you're describing a scenario where Entra is configured as a Linked Provider for Active Directory (and group claims are configured correctly). With this setup, all Forms sees is that the users are AD/Windows trustees. With a Linked Provider config, the Entra/SAML bit is only between Entra and Directory Server, so the answer to: 

Does our use of Entra for authentication prevent us from using Active Directory groups in Forms teams?

is no, it does not prevent you from using AD groups for Forms teams.

If Entra was set up as a completely independent, non-linked SAML identity provider with "SAML" type users registered, it would not work, as SAML-type users cannot be associated with AD groups.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.