Entra Groups not working correctly

[CrispyLettuceTech]

Hello,

I'm trying to use an Entra group to allow for multiple users to use authd to connect to a Linux Ubuntu system (24.04.2), however only the first person seems to be able to connect over ssh and every subsequent person gets access denied, Using the troubleshooting "journalctl -u snap.authd-msentraid.authd-msentraid.service" I can see that the log states "user "x" is not in the list of allowed users" and currently the only way I can get around this is to add the user directly into the broker.conf file, which sort of defeats the point of using the Entra group.

Any help here would be massively appreciated!

[adombeck]

Hi @CrispyLettuceTech, thanks for reaching out.

I'm trying to use an Entra group to allow for multiple users to use authd to connect to a Linux Ubuntu system

authd currently doesn't support allowing only a specific Entra group to log in. You have the following options (citing https://documentation.ubuntu.com/authd/en/stable/howto/configure-authd/#configure-allowed-users):

[users]
## 'allowed_users' specifies the users who are permitted to log in after
## successfully authenticating with the Identity Provider.
## Values are separated by commas. Supported values:
## - 'OWNER': Grants access to the user specified in the 'owner' option
##            (see below). This is the default.
## - 'ALL': Grants access to all users who successfully authenticate
##          with the Identity Provider.
## - <username>: Grants access to specific additional users
##               (e.g. [email protected]).
## Example: allowed_users = OWNER,[email protected],[email protected]
#allowed_users = OWNER

[CrispyLettuceTech]

Hi @adombeck - this is perfect, I used the allowed_users = ALL and anyone authenticating through the Entra group has worked correctly. Thank you for the quick support.