FMC Management Center - Admin Access - Active Directory - External Authentication - users found but "invalid because their format is not supported for this device"

PJR_CDF — Fri, 21 Feb 2020 17:23:36 GMT

I've followed this guide to setup our Active Directory as a source of external authentication for access to our Firepower Mangement Centre web GUI

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/user_accounts_for_management_access.pdf

When testing I get the following result

User Test:

"There were no users found with this filter.
6 users were found with this filter but are invalid because their format is not supported for this appliance.
See Test Output for details."

The results of the test show successful LDAP bind

user :
attrib :
ldap_result: 0 -Success
found 6 entries...

then shows 6 user entries which are the relevant users who are members of the 2 groups I wish to allow access to.

Below that list it then also shows :

-------------
search failed
Unsupported Users The following users (6) were found with this filter but are invalid because their format is not supported for this appliance:
---------------

and then lists an unbroken list of the same 6 users DN objects

I cannot login as any of these users?

What am I missing?

Re: FMC Management Center - Admin Access - Active Directory - External Authentication - users found but "invalid because their format is not supported for this device"

PJR_CDF — Tue, 13 Aug 2019 08:34:49 GMT

This is now resolved - I needed to add the "sAMAccountName" value to the UI Access Attribute Mapping Section

topic FMC Management Center - Admin Access - Active Directory - External Authentication - users found but "invalid because their format is not supported for this device" in Network Security

FMC Management Center - Admin Access - Active Directory - External Authentication - users found but "invalid because their format is not supported for this device"

Re: FMC Management Center - Admin Access - Active Directory - External Authentication - users found but "invalid because their format is not supported for this device"