Manage users in groups and directories

You can sync your directories with the Cloud Portal Admin Panel to quickly update user lists as students and staff change throughout the year.

1. Start by syncing your Directory to Cloud Portal:
   
   • Azure Directory
   • Google Directory
   • IDex Agent (to sync Active Directory for Cloud-only setups)
   • IDex Directory (for Smoothwall On-Premise Appliance-only and Hybrid setups)
   • Active Directory (Smoothwall On-Premise Appliance only)
   • Local Users Directory (Smoothwall On-Premise Appliance only)

     Note

   Smoothwall has deprecated these directory types in Maiden:

   • eDirectory
   • Apply/OpenLDAP Directory
   • 389 Directory
   • RADIUS Accounting directory
   • Active Directory (legacy method)
2. Smoothwall automatically syncs the users each night, or you can complete a manual sync at any time.
3. Create ‘User Groups’, and map the Directory groups from the synced directory to your User Groups.

     Note

   The Admin Panel refers to User Groups as either Smoothwall Groups or Linewize Groups depending on your region and the products you have purchased.

4. To identify users and place them in the right groups, you must set up Authentication. Create Web Proxy authentication policies or see all available Authentication Methods.
5. When users authenticate, you can then use User Groups to:
   
   • Define groups of students or staff to apply Web Filter policies.
   • Send Safeguarding Alerts to different staff based on User Groups.
   • Keep Monitor Alerting Profiles current, ensuring your staff receive email alerts for the students they support.

Add or remove users from groups

You can’t modify the Directories or the users in your Directory groups from within Admin Panel, Smoothwall Filter or Monitor. You can only change the users that are in your Directory groups in your Directory Service provider.

To amend the mapping of your Directory groups to your User Groups, see Add or edit User Groups.

Multiple directories

In Cloud Portal

When users and usernames exist within multiple directories, Smoothwall uses the last synced directory for User Group membership. We recommend keeping the same names and memberships in both Google and Azure directories.

In On-Premise Appliance

When users and usernames exist within multiple directories, Smoothwall uses the first directory for User Group membership. We recommend ordering them so:

• Some organisations set up both an IDex and Active Directory in Smoothwall for the same Active Directory server to ensure the latest changes are detected without having to wait for the overnight IDex sync. In these scenarios, put your IDex Directory above your Active Directory.
• Otherwise, place the directory with the most users at the top of the list to reduce the number of queries.

To order directories:

1. Select and drag each directory into place.
2. Select Save moves.

Troubleshoot issues with directories

You can diagnose directory-level and network problems, such as an incorrect username for domain connect requests or insufficient privileges for domain join requests.

In Cloud Portal

You can only see whether the directory sync was successful or failed. Check your directory service setup if the sync fails.

In On-Premise Appliance

1. Go to Services > Authentication > Directories.
2. In the Status column, check for a red cross or green tick.
3. If there is a red cross, hover over the field and select Diagnose.
4. Smoothwall will then complete a series of checks. You can use the notes to help diagnose and fix issues with your directory setup, or contact Smoothwall Support for help and provide these details.