integration Ubuntu 24.04 with Azure AD

Question

We have recently configured native user authentication with Azure Active Directory (Azure AD), and it is working fine; users are able to access the machine using their Azure AD login details. However, we encounter an issue when the user's permissions are changed to Global Admin: the login fails. The login works again when the privilege is removed. How can we resolve this issue?

Answer 1

Hi @Vishnu Anand , by default, Azure AD authentication on Ubuntu 24.04 uses the SSSD (System Security Services Daemon) service to authenticate users. SSSD is a system daemon that provides access to identity and authentication providers.

When a user logs in using Azure AD authentication, SSSD queries Azure AD to authenticate the user's credentials. If the user has Global Admin permissions, SSSD may not be able to authenticate the user's credentials due to the increased level of permissions.

Try checking the SSSD logs to see if there are any error messages in the var/log/sssd/ directory. If there are error messages related to the user's authentication, you can try modifying the SSSD configuration to exclude Global Admin users Azure AD authentication. To do this, add the following line to the [sssd] section of the /etc/sssd/sssd.conf file: ignore_group_members = Global Admins

Make sure to restart SSSD: sudo systemctl restart sssd.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James