Help for Administration

Ready to get started with Callisto? We’re here to help. Browse through our most popular articles or get in touch if you need advice on something more specific to your SCCM environment.

Callisto Help > Setup and user administration > Active Directory Group Authentication

Active Directory Group Authentication

Introduced in Callisto version 1908 and onward, Callisto Active Directory Group Authentication enables the Callisto administrator to associate Callisto Roles with AD Security Groups. This ensures that a new user is automatically granted the relevant rights in Callisto without the need for manual user creation.

To use this feature, first enable LDAP Authentication using Administration - Settings - User Management, more details here.

Once this is configured, we can assign an existing role to an Active Directory Group, or create a new role for a group. N.B. There is currently no support for nested groups.

Assigning an existing Callisto role to an Active Directory Group

Navigate to Administration - Roles.
Click the Edit button for the "Configuration Manager User" role
1. Select to enable the Active Directory (AD) function
2. Type the name of the Active Directory Security Group
3. Save your changes

In a separate browser session, attempt to log in with a user who is a member of the group you added above, the user can log in with either their AD username (example LennonJ) or their UPN (example You will see that the user is authenticated with their AD credentials and has the correct views presented via their role assignments: