Cisco 3.3 - Manual (Page 635)

16-7
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 16 User Group Mapping and Specification
Group Mapping by Group Set Membership
Creating a Cisco Secure ACS Group Mapping for Windows,
Novell NDS, or Generic LDAP Groups
Before You Begin
To map a Windows, Novell NDS, or generic LDAP group to a Cisco Secure ACS
group, follow these steps:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Group Mappings.
Step 3 Click the external user database name for which you want to configure a group
mapping.
If you are mapping a Windows group set, the Domain Configurations table
appears. If you are mapping an NDS group set, the NDS Trees table appears.
Otherwise, the Group Mappings for database Users table appears.
Step 4 If you are mapping a Windows group set for a new domain, follow these steps:
a. Click New configuration.
The Define New Domain Configuration page appears.
b. If the Windows domain for which you want to create a group set mapping
configuration appears in the Detected domains list, select the name of the
domain.
Tip To clear your domain selection, click Clear Selection.
c. If the Windows domain for which you want to create a group set mapping
does not appear in the Detected domains list, type the name of a trusted
Windows domain in the Domain box.
d. Click Submit.
The new Windows domain appears in the list of domains in the Domain
Configurations page.
Step 5 If you are mapping a Windows group set, click the domain name for which you
want to configure a group set mapping.
The Group Mappings for Domain: domainname table appears.