How to use SearchFilterForAccounts when configuring an RSA Via Lifecycle & Governance Authentication Source
2 years ago
Originally Published: 2016-06-06
Article Number
000067853
Applies To
RSA Product Set: RSA Via Lifecycle and Governance (RSA Via L&G)
RSA Version/Condition:  7.0 and lower
Issue
Authentication Source configuration (i. e., Authentication type=Account Collector) provides the ability to specify an account filter field, such as SearchFilterForAccounts, to limit who can log in but does not document how to create a valid filter.

Go to Admin > System > Authentication tab > Create Authentication Source.
User-added image
 
User-added image

 
Resolution
The filter needs to contain a %v placeholder for the account name. For example, a valid SearchFilterForAccounts might look like:
 
(&(sAMAccountName=%v)(objectclass=user)(memberof=CN=users,ou=marketing,dc=yourcompany,dc=com))

User-added image
Notes
Help information on how to specify a SearchFilterForAccounts filter will be included in a future release.