CISCOWORKS LMS and CISCOSECURE ACS Authenticate any user with HD role

[juliocarossella]

Hi:

We are using CiscoSecure for authentication and authorization for differente apps.

Specifically, any user already in the ACS database is authenticated to log in CiscoWorks LMS, with HD role (this happens although none of the CiscoWorks apps have been checked for this group). 

Why is this happening?

We don´t want that any user (although they are only permitted the HD role) could login.

Thanks a lot

Julio

[Nael Mohammad]

Follow the ACS integration guide to ensure the group you don't want to have access to LMS have the roles set to "NONE" instead of the default HD roles.

http://www.cisco.com/en/US/partner/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/prod_white_paper0900aecd80613f62.html