AD User Sync in XG

Question

Hello 
 I am trialling an XGS VM running SFOS v18.5.3 MR3. 
 I have setup AD Sync for users and groups. We will specifically be using AD groups to control web filtering. 
 Must all users first navigate to the user portal before the XG will place them in the appropriate group, or is the sync automated? 
 I have read the documentation regarding AD Group sync and am a little confused on that front. It says that the users won't be displayed in the web admin interface but will be sync'd to a backend DB. 
 Many thanks

LuCar Toni · Accepted Answer

And most likely there are no use cases, which needs a pre fetch of users. 
 If you can work with groups, that is fine. If you have a firewall rule, which needs a user for example, that could be a use case of pre fetching (rare). 
 If you use SSLVPN / Ipsec, you can work with the group and it will create the users for you. 
 Web Proxy can work with the group and no need to fetch the users upfront. 
 Firewall the same. 
 Administrator role to create webadmin admins is tied to the user, not the group, so that use case could be potentially be a fetch scenario.

Vivek Jagad · Answer

In order for user to pop under the authentication > user list || Then the user must be authenticated once by any means of authentication, either captive portal/user portal..etc.

AD User Sync in XG

Top Replies

Submitted a Tech Support Case lately from the Support Portal?