Symantec Privileged Access Management

  • Private Community

  • 1.  How to configure AD with CA Privileged Access Manager

    Posted Jul 05, 2017 06:51 AM

    Hi,

     

    I have configured AD with CA PAM but users are not able to login.
    Any more configuration needed ?

     

    Error:

     

    Details—Message 18069: The Active Directory user with user principal name "***@domain" or samAccountName "***" is not registered with Xsuite.

     

    Please help.

     

    ITSAT

    VOLVOCARS



  • 2.  Re: How to configure AD with CA Privileged Access Manager

    Broadcom Employee
    Posted Jul 05, 2017 08:18 AM

    Hi

    What version are you in ? There was a bug for this version about this message which was resolved in 2.7

     

    When you have configured the integration, can you see the LDAP users imported into PAM ? Can you see the LDAP group created ?



  • 3.  Re: How to configure AD with CA Privileged Access Manager
    Best Answer

    Broadcom Employee
    Posted Jul 05, 2017 09:00 AM

    As mentioned it seems that you may not have actually imported a group that contains that specific user. AD users must be imported into CA PAM before they can login. Please see https://docops.ca.com/ca-privileged-access-manager/2-8-1/EN/implementing/provision-your-server/provisioning-devices/device-group-setup/import-ldap-groups