Answer by Lukas Lieb

Lukas Lieb — Wed, 01 Apr 2020 03:10:18 -0400

Set you security system configuration:

Set an external security name in your role configuration:

Synchronize role. The role should now be mapped to the security system group:

Answer by Reguel Wermelinger

Reguel Wermelinger — Wed, 01 Apr 2020 02:52:39 -0400

Mappings between groups/users defined within an Axon.ivy Project to an Active Directory CN must be defined on the Axon.ivy Engine serving the workflow app.

In then Engine Cockpit roles can be defined with an 'external security name' reference. So once roles are linked like this to the Active Directory - they are fully under control of the AD administrator.

https://dev.axonivy.com/doc/8.0/engine-guide/tool-reference/engine-cockpit/security.html#role-detail

Basically these role/user mappings live in the system database of the Axon.ivy Engine. So you have to define it on the server for once. Many other security system configurations can be defined in files: see https://dev.axonivy.com/doc/8.0/engine-guide/configuration/files/ivy-securitysystem-yaml.html#ivy-securitysystem-yaml

Answers to: Is there a way to transfer/save permissions mapping for external authentication sources?

Answer by Lukas Lieb

Answer by Reguel Wermelinger