Stop any Users from login into AppDynamics SAML

[Mohit.Gupta]

Hi,

We have implemented SAML with ADFS. Now, we want to block a set of users from login into AppDynamics.

Since its SSO any user in domain is able to login as there has to be at least one default role mapped and AppDynamics has no option to show user that they are not authorized to login (When using SSO). For now, we have created a role with no permissions and mapped it with Default SAML group. How can we block particular set of users in domain from login into AppDynamics while continue to use SSO for the intended users. 

Regards,

Mohit

[Mario.Morelli · Accepted solution]

Hi Mohit

You can use the SAML Access Attribute option in the SAML Configuration page to manage access.

Create or use an attribute that would need to be set for users that are allowed to access AppDynamics

Ciao

[Mohit.Gupta]

Hi Mario,

Worked, we created a new attribute in ADFS and passing the value of a Security group there.

Now, we are checking if the user is part of our "AppDynamicsSaaS" security group if yes the user will be able to login if no user will get HTTP 400 error. 

I wonder if there was a better screen to display instead of HTTP 400 error.

Regards,

Mohit