# Ansible AWX/Tower configure with MS AD auth

**URL:** <https://forum.ansible.com/t/ansible-awx-tower-configure-with-ms-ad-auth/31287>\
**Category:** AWX Project\
**Tags:** windows, awx\
**Created:** [September 16, 2019, 2:29pm UTC](https://forum.ansible.com/t/ansible-awx-tower-configure-with-ms-ad-auth/31287 "2019-09-16T14:29:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andrew\_Meyer1](https://avatars.discourse-cdn.com/v4/letter/a/df705f/32.png) [@Andrew\_Meyer1](https://forum.ansible.com/u/Andrew_Meyer1)\
**Post date:** [September 16, 2019, 2:29pm UTC](https://forum.ansible.com/t/ansible-awx-tower-configure-with-ms-ad-auth/31287/1 "2019-09-16T14:29:55Z")

</div>

I have an instance of AWX setup and I am trying to configure it with MS Windows AD authentication. I am using the docker setup of AWX. 1) Where should I be looking for logs to help diagnose config issues? 2) Does anyone have an example of how it should be setup? A lot of what I’m finding seems to help a bit but not fully. What are you using for GroupType? I tried ActiveDirectoryGroup but it wouldn’t let me, is that something that is only available in Tower?

Did you use anything in the LDAP User DN Template? LDAP Group User DN Template?

LDAP User Search?

etc  
etc

---

<div class="post-metadata">

**Author:** ![Katsutoshi\_Nakatomi](https://avatars.discourse-cdn.com/v4/letter/k/e79b87/32.png) [@Katsutoshi\_Nakatomi](https://forum.ansible.com/u/Katsutoshi_Nakatomi)\
**Post date:** [September 16, 2019, 3:51pm UTC](https://forum.ansible.com/t/ansible-awx-tower-configure-with-ms-ad-auth/31287/2 "2019-09-16T15:51:59Z")

</div>

Hi

Adure AD OAUTH is buggey,Not ready for use yet

or LDAP, this is the setting  
LDAP USER DN template  
cn =% (user) s, ou = People, dc = ldaphostname, dc = domain, dc = contory

LDAP USer search

LDAP Group Search  
[  
"ou = groups, dc = ldaphostname, dc = domain, dc = contory",  
"SCOPE\_SUBTREE",  
"(cn = Ansible User)"  
]

---

<div class="post-metadata">

**Author:** ![Andrew\_Meyer1](https://avatars.discourse-cdn.com/v4/letter/a/df705f/32.png) [@Andrew\_Meyer1](https://forum.ansible.com/u/Andrew_Meyer1)\
**Post date:** [September 16, 2019, 4:03pm UTC](https://forum.ansible.com/t/ansible-awx-tower-configure-with-ms-ad-auth/31287/3 "2019-09-16T16:03:50Z")

</div>

Hi,  
Thanks for the response. I am not using Azure or Oauth. This would be straight LDAP to MS AD.