This message was deleted.

Hi, can you share the json from the browser inspect when you click "enable" on the auth provider after setting all values? I want to check the values you're using for userSearchFilter,groupMemberUserAttribute, groupMemberMappingAttribute and if there any value for allowedPrincipalIds. if possible to share a sample of the LDAP users/organization/groups set up it would be good, something similar to this:

dn: cn=alice,ou=users,dc=mock,dc=com
objectClass: inetOrgPerson
objectClass: organizationalPerson
cn: alice
sn: Alice
mail: <mailto:alice@mock.com|alice@mock.com>
uid: alice
userPassword: password123

dn: cn=rancher-admins,ou=groups,dc=mock,dc=com
objectClass: groupOfNames
cn: rancher-admins
member: cn=admin-ldap,ou=admin,dc=mock,dc=com
member: cn=alice,ou=users,dc=mock,dc=com