Authentication.UserGroups value is different for NTLM authen and Authentication With MCP

[pakorn]

Hi 

For Authentication.UserGroups value is different for NTLM authen and Authentication With MCP ? 

as I testing 

When authen with MCP 

Authentication.UserGroups value is XXX\Group 

Sample : tfam\domain users

When authen with NTLM

Authentication.UserGroups value is Group

Sample : Domain Users

If I create policy to control by Authentication.UserGroups = domain users it should be using both value 
domain users  and tfam\domain users ? 


BR
Pakorn

[fw_mon · Accepted solution]

Hello @pakorn 

please try to disable "keep domain name in group name" checkbox in the MCP Auth settings (Policy > Settings > Authentication > [your MCP settings name]