Authenticate via Active Directory

Portainer Business Edition lets you connect to an existing Microsoft Active Directory service to manage your authentication settings in Portainer.

To set up Active Directory authentication, from the menu select Settings then select Authentication. Under the Authentication method section select Microsoft Active Directory.

A guide to all of the Active Directory configuration settings follows.

Automatic user provisioning

Enabling this setting automatically creates users within Portainer once they are successfully authenticated by Active Directory (AD). If you do not enable this, you must manually create users with the same username as the corresponding AD user.

AD configuration

Configure your Active Directory details using the table below as a guide.

AD Connectivity Security

Configure the security settings using the table below as a guide.

User search configurations

Configure the user search configurations using the table below as a guide. Click add user search configuration to set up multiple configurations.

Group search configurations

Configure the group search configurations using the table below as a guide. Click add group search configuration to set up multiple configurations.

Auto-populate team admins

If desired, Portainer can configure specified AD groups of users to become Portainer administrators automatically.

To configure this, first click add group search configuration and define the Group Base DN, Groups and Group Filter as required. Once done, click the Fetch Admin Group(s) button to retrieve the list of groups matching your search configuration.

When you're happy with the group selection, enable this feature by toggling Assign admin rights to group(s) on.

Test login

To test your settings are correct and that the right users and groups are configured for access, scroll down to Test login, enter a valid user and password then click Test. If everything is working as expected, a green tick will appear next to the button.