View AD Components in Secure Access

The integration of Active Directory (AD) with Cisco Secure Access requires that you add the organization's AD components on Secure Access and integrate a Cisco AD Connector. Once these AD components are added, you can view them in Secure Access. You can also view the AD Connector deployments in Secure Access.

This guide describes how to view the AD components that you registered with Secure Access and the AD Connectors, which you deployed in your environments.

Table of Contents

• Prerequisites
• Procedure

Prerequisites

• Full Admin user role. For more information, see Manage Accounts.
• For information about the requirements for deploying the AD Connector, see Prerequisites for AD Connectors.

Procedure

In Secure Access, view the AD components and AD Connectors that you deployed.

View AD Components in Secure Access

It can take up to four hours for large numbers of AD user and group objects to synchronize for the first time.

Seeing your groups listed means the domain controllers have automatically synchronized user and computer group memberships with Secure Access through the AD Connector successfully. Any subsequent changes should also sync successfully.

Note: If the AD Connector does not appear in Secure Access and you have met the network requirements, check that the AD Connector server is not missing the DigiCert CA. If a certificate error is presented, download and install the latest DigiCert Global Root CA from DigiCert and restart the Cisco Active Directory Service. If it does not appear, contact Cisco Secure Access Support.

1. Navigate to Connect > Users and User Groups, click Configuration management, and then expand Active Directory.

   

2. For Active Directory components, view the properties of the installed AD components.

   • Name—The hostname of the Windows computer where you installed the AD Component.

   • Internal IP—The internal IP address of the AD component.

   • Site—The unique label that identifies the Site associated with the AD component.

   • Type—The type of AD component, either Domain Controller, Domain, or AD Connector.

   • Status—The state of the AD component.

   • Version—The version of the AD component.

     

Manage Sites for AD Components < View AD Components in Secure Access > Delete AD Components