如何搭配GlobalProtect通过电子邮件地址作为用户名的门户配置选择CIE？
2752
Created On 08/30/22 22:19 PM - Last Modified 06/06/25 20:08 PM
Objective
如果你喜欢搭配GP配置基于专有名称或电子邮件地址，您可以按照此配置匹配DN或者UPN.
Environment
- CIE
- 全局保护
- 蔚蓝
Procedure
设备 > 用户识别 >CIE更改这两个设置：
1-Primary用户属性下使用“User Principles name”和Mail下E-邮件部分。
2-组属性下的组名使用“Distinguished name”
3- 使用电子邮件地址或群组名称 (DN格式）在您的全局保护配置中：
Additional Information
You can check the group and user list by running these 2 commands : > show user group list cn=vpn-users,dc=khanit,dc=tech Total: 1 * : Custom Group admin@PANOSFW> admin@PANOSFW> admin@PANOSFW> show user group name "cn=vpn-users,dc=khanit,dc=tech" source type: cloud Group type: Directory Sync Service [1 ] sakhan@khanit.tech [2 ] srazaque@khanit.tech [3 ] admin123@khanit.tech
Please note that , in order to see the groups on firewall with CIE , you need to add the group under the security policy and commit on firewall and then run the "show user group list " to see the group on firewall.