Alteryx Connect. Using LDAP groups for authorization

[AndreyBaburov]

Hello,

We are implementing a project with Alteryx Connect in the Bank.

So I have a question from their IT Security officers:

Bank’s security regulations require to use LDAP groups to authorize users inside each Bank application.

Please advise me how I can set integration with LDAP to use LDAP’s groups and membership for Alteryx Connect authorization?

[JZZChew]

As per this help link, I clicked on Use Windows Authentication for Single Sign-on under Administration Console > Connect Configuration > Single Sign-On. It keeps returning a Connect Sign-in page for me though, the Active Directory integration didn't work for me. Hopefully better luck for you!

[AndreyBaburov]

Hi,

SSO is okey, but authorization is something another. In another word Customer wants to use AD groups to setup permissions for Alteryx Connect

[george_allen]

We have similar interests/concerns over the Alteryx authorization model, but as it relates to Alteryx Server, not specifically Alteryx Connect. 

It would be nice to see if Alteryx has a more comprehensive approach to use of a structure like Active Directory for authorization. 

[VojtechT]

Hi Andrey,

currently there is no official support for that but it is on our Connect's Roadmap for 2019. 

Vojta

[niravparikh]

Has this been implemented now in the newer Alteryx Connect versions ?

[VojtechT]

Hi @niravparikh ,

yes, the AD/LDAP synchronisation (including groups) has been implemented in 2020.2. However, there is known defect that every run creates a new version of user no matter if there is any change. The has been fixed in upcoming release 2020.3, which should be quite soon. 

Let me know if you have any other questions.

[kamanivk]

Hi @VojtechT 

The issue with new version of User has been fixed on 2020.3?

Thank you.

[VojtechT]

Hi @kamanivk ,

unfortunately it was not possible to fit it into the 2020.3 release and thus the fix is part of the upcoming release, which should available around late November.