SAML authentication + LDAP (AD) groups for permissions / authorization

SonarQube Server / Community Build
1

Hello, we have an Enterprise 2025.4 LTA zip installation. We need to switch authentication provider over to SAML for MFA (done) yet retain our LDAP-based resolution of groups from Active Directory. So far, all of the other applications we have configured this way work fine and retain the separation of authentication and authorization.

Our recent testing shows that switching to SAML authentication has broken our AD group resolution for permissions management.

Is that expected?

Is the described configuration supported?

2

Hi,

Unfortunately, what you’re describing is expected. Delegating to two different systems to manage the different aspects is not something we planned for.

Would you mind providing a little more detail on why you need to keep group management in LDAP?

 
Thx,
Ann

4

>why

Because Active Directory is where our thousands of groups are defined and managed.