Prerequisites

For an overview of the Identities feature, refer to the section: Identity Management.

Configuration

Add a Cyolo Group

1. Log in to the Admin Portal.
2. Navigate to Identities > Groups.
3. Click New in the top right corner (or click the dropdown and choose Cyolo Group).
4. In the New window, enter the following information in each field:
   1. Name – Enter a name for this group.
   2. Identities – select users or groups (nested groups).
   3. Condition Profile - users will be able to log in only if they meet all the conditions.
5. Click Save.

Add a Dynamic Group

You must configure at least one external IdP on Integrations > Identity Providers before creating dynamic groups. Refer to the section on integrating external IdP to the Cyolo platform: Configuring LDAP Integration.

1. Click the drop-down alongside the Add button and select Dynamic Group.
2. Choose identity provider - The identity providers integrated with the Cyolo platform will be displayed at the top. Select the IdP for this configuration.
3. Choose group resolving method – Choose the method to locate the group:
   1. Attribute – Enter the attribute name of the group in the IdP. For example, memberOf.
   2. Free Query - Provide an XPath query to match the values you expect from the given group.
4. Click the Import Groups button.

5. In the Import LDAP Groups window, enter the name of a group in the search box.
6. Select the group from the groups displayed.
7. Click Confirm.
8. Define groups by their expected value – Enter the name of the group to be imported and its identification value within the external IdP. For example, in the case of LDAP, it is DN.

• Group name - Set a local name for this dynamic group.
• Expected Value - CN=Domain Admins, CN=Users, DC=example, DC=com
• Click Add.

● Click Add in the top right corner.