AnyConnect LDAP Not Authenticating Properly

joseph.easter · ‎02-05-2016

I have 3 user groups on my AnyConnect VPN (Admin, Developers, and Users). When the Admins login, they are authenticated via LDAP to the Users Connection Profile instead of the Admin. Profile. In which they cannot browse to the URL they need to get to. They get a "Page Can't be Displayed" message.

My DAP policy have the Admin. ACL-Filter applied like correctly. Also Users and Developers are authenticating without any problems and to the correct profile. I verified with the server team that the Admins are listed in the enterprise LDAP server.

What can I look at to troubleshoot this problem?

jj27 · ‎02-05-2016

Is it possible that the Admin login accounts are part of the Users group as well and matching the Users DAP entry?

joseph.easter · ‎02-06-2016

Hey thanks J for the response!

This could be the case. I'll check on Monday with the LDAP team and ask them if the Admin users are listed in the "User" group as well. Will update you Monday.