How can I login IAM Modules with an user who has a specific Active Directory Security Group?

One custemer's version is 8.1.3 and other one is 8.1.1.  I mean fat clients (Designer, LauncPad, Manager, etc..)

Option 1 is to use the program functions ApplicationStart_<Toolname> for example ApplciationStart_Manager for this. The drawback is, that some of these are already assigned to the ootb permission groups. That means you would have to copy some of the ootb groups and create your custom ones without these functions assigned. Then assign the needed program functions to a permission group and this group to an application role. Make the membership dynamic based then.

Option 2, and I think this is the better one, use the OAuth / OpenID Connect authenticator for the fat client authentication and restrict the groups in the IDP itself.

Hello Markus,

We've enabled OAuth authentication and installed RTST certificate properly. But during logging in via OAuth we've having the error below.

I've also checked self-sign certificate is enabled. Thank you for your help.

Failed to authenticate user.
An error occurred while sending the request.
An error occurred while sending the request.
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
The remote certificate is invalid according to the validation procedure.

I would like you to create a new thread for this topic or contact support just because this looks like a new topic to me.

Thank you.

I would like you to create a new thread for this topic or contact support just because this looks like a new topic to me.

Thank you.