Active Directory Integration & RBAC

Using AD accounts for authentication into Advanced Insights

Applies to: Advanced and Patch Insights

Advanced and Patch Insights support integration with Active Directory for user authentication. This feature is enabled by an administrator in Administration > Settings > User management. Once enabled, this will ensure that any users signing in can use their AD username and password. If users have an RBAC role defined in Configuration Manager, Advanced Insights will adhere to that role, only showing the clients they are permitted to view.

User management settings tab

To enable Active Directory authentication capabilities:

1. Check the box for Enable Active Directory Authentication

2. Optionally Enter your Active Directory domain name (normally only required if the authenticating domain is different from the domain the Advanced Insights server is installed in)

3. Optionally Enter a username and password used to connect to Active Directory, this is only required if the Advanced Insights App Pool identity (Local System by default) has been restricted from reading Active Directory, which is uncommon

The username and password under the domain name are optional.

By default, we will use the computer account of the Advanced Insights server to authenticate active directory requests.

After you have entered these details, you can now log in with your Active Directory UPN or username.

The account MUST have a valid Firstname and Surname set in its AD properties. Without this an error will be logged in the Advanced insights API log stating "Cannot insert the value NULL into column 'Name'"

If this is your first time logging in to Advanced Insights, you will receive whatever role is assigned as "default" or roles your Active Directory Group membership assigns.

You can read more about assigning roles to Active Directory Groups in the article below:

Active Directory Group to Role Assignment