githubEdit

LDAP Groups are not auto-populating Portainer teams

Issue:

Users find that LDAP authentication succeeds and Display User/Group matching correctly shows group membership, but the user is not automatically added to the corresponding Portainer team on login.

Cause:

Portainer team synchronization requires distinguished name (DN)-based group membership.

  • posixGroup + memberUid → Group detection works, but Team sync does not assign users

  • groupOfNames + member → Fully supported for Team auto-assignment

Resolution:

To resolve this issue, update the LDAP group configuration to use DN-based membership.

objectClass: groupOfNames
member: <full user DN>

Last updated

Was this helpful?