Restrict authentication to a single AD group

[astur1980]

Hi guys, quick question. I have enabled Microsoft AD authentication for my domain and all users can now access; obviously if they don't have a role mapping rule matching their username, they won't be able to do anything.

However i'd like to restrict the authentication just to an specific AD security group, meaning that all valid AD users not in that AD group would get a login refused message,

May you give me a hint on how can I achieve this?

Thanks!

[zanyterp]

Create a new role mapping rule on the role
Change the type from "Username" to "Group membership"
Click on groups>Search>find the group & add group
Add the group to the right side of the equation
Add the role that you want to provide
save changes

Click on the box next to the existing username rule, then click on delete
save changes