Illumio Community Hub

 View Only
Expand all | Collapse all

When using Illumio cloud based, is it possible to integrate active directory based identities from on prem domain controllers?

  • 1.  When using Illumio cloud based, is it possible to integrate active directory based identities from on prem domain controllers?

    Posted 04-26-2023 09:25


  • 2.  RE: When using Illumio cloud based, is it possible to integrate active directory based identities from on prem domain controllers?

    Posted 04-26-2023 10:36

    Henri,

    If using a SaaS PCE, yes, it is possible to add AD user groups and write policy based on the user groups. Read about "Adaptive User Segementation" (AUS) in the docs. I hope this helps!



  • 3.  RE: When using Illumio cloud based, is it possible to integrate active directory based identities from on prem domain controllers?

    Posted 07-20-2023 10:55

    Hi Katy, but this section doesn't explain how to interconnect Cloud based Illumio with on prem Active Directory, or even Azure cloud active Directory. Do you have a doc for this?



  • 4.  RE: When using Illumio cloud based, is it possible to integrate active directory based identities from on prem domain controllers?

    Posted 07-25-2023 16:59

    Hi Henri!

    This is the doc I was referring to. It has step-by-step instructions for adding SIDs to the PCE. https://docs.illumio.com/core/23.2/Content/Guides/security-policy/security-policy-objects/adaptive-user-segmentation.htm

     

    If I'm answering the wrong questions and you really want to use AD groups to control access to the PCE, you'll need to do that with an IdP. https://docs.illumio.com/core/23.2/Content/Guides/pce-administration/access-configuration/authentication.htm

     

    Best-

    Katy