Illumio Community Hub

 View Only
Expand all | Collapse all

LDAP Authentication for Login Illumio

  • 1.  LDAP Authentication for Login Illumio

    Posted 04-10-2026 03:52

    Dear All,

     

    currently we are facing difficulties of configure LDAP authentication for login to PCE Dashboard,

     

    we configured like this for LDAP,

    image.png 

    image 

    and after save the configuration, testing is OK

    image 

    when we try to tcpdump test connection, there is traffic at illumio console,

    WhatsApp Image 2026-04-10 at 14.44.56but when we testing login, we couldnt find any traffic in,

     

    we are mapping the group user LDAP like this in external group, and then mapping it to global roles,

    image 

    kindly please inform us where are we lacking ?

     

    thanks a lot,

     


    #Authentication
    #Deployment
    #PCE


  • 2.  RE: LDAP Authentication for Login Illumio

    Posted 04-10-2026 12:11

    I don't see group membership configuration. Can you try adding an external User with it's sAMAccountName and then logging in as that user? That will confirm that the ldap search is working. Also there is an auth log on the PCE that may have more information.



  • 3.  RE: LDAP Authentication for Login Illumio

    Posted 04-13-2026 00:32

    Dear Harit,

     

    we trying to add sAMAAccountName to external user,

    image 

    image 

    but i couldnt find log on dashboard pce when trying to login with user pcetest1,

    image 

    and here's the log from console:

    2026-04-13T11:01:26.242404+07:00 level=info host=pce ip=127.0.0.1 program=illumio_pce/login| sec=052886.242 sev=INFO pid=29762 tid=27600 rid=0 Parameters: {"utf8"=>"✓", "authenticity_token"=>"[FILTERED]", "SAMLRequest"=>"", "RelayState"=>"", "user"=>{"email"=>"pcetest1", "password"=>"[FILTERED]", "remember_me"=>"0"}, "commit"=>"Log In"}

    WhatsApp Image 2026-04-13 at 11.31.21kindly please ur advise,

     

    thanks

     



  • 4.  RE: LDAP Authentication for Login Illumio

    Posted 04-13-2026 11:33

    Not clear to me what the issue is without digging deeper through logs / LDAP config. Do you have SAML also configured? If yes, please disable SAML when trying LDAP. You can only have one. If this does not help, please reach out to our support team.



  • 5.  RE: LDAP Authentication for Login Illumio

    Posted 04-14-2026 06:02

    Dear Harit,

     

    we dont have any SAML configured,



  • 6.  RE: LDAP Authentication for Login Illumio

    Posted 05-14-2026 08:42

    Hi,

    Use these values and retest:

    Full Name Attribute: cn

    Group Membership Attribute: MemberOf

     

    Cheers