!!!Integration with Active Directory

SafeUTM provides the possibility of one-way synchronization with a domain based on Microsoft Active Directory.

Only accounts are imported, excluding passwords. When the user undergoes the authorization procedure, verification is carried out by means of Active Directory.

Integration with Windows Server 2008 (only R2), 2012, 2016, 2019 is supported.

Features of Using Integration with Multiple Active Directory Domains

When integrating SafeUTM with multiple domains, the following limitations apply:

From Active Directory domain tree, only the data of the domain controller to which SafeUTM is connected is imported into SafeUTM.
Authorization via SafeDNS Agent will only work with the first domain to which SafeUTM was joined.
With Single Sign-On authorization, when the browser is opened for the first time, the user will be offered a choice of domains for authorization. The selection will be saved using a cookie and will be used at the next authorization. If you want to change the domain, delete the cookie (for local SafeUTM IP address).

Using Security Groups and Accounts Imported from LDAP as Filter Rule Objects

Security groups and accounts imported from Active Directory can be used as filter rule objects in the following sections:

Firewall
Application control
Speed limit
Content filter

Usage example:

Import accounts and/or security groups from Active Directory in the Users -> Accounts section (for more details, see Importing Users). This example imports the AD security group Domain Users:
Go to the section where you want to use a group or account imported from Active Directory. For example, in Application Control:
Fill in the required fields and click Save.