Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mapped

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

From the CLI: ; Run the command pureds list management (or pureds list) to display the current directory service configuration. Verify the URI, Base DN, and Bind User fields are correct and the service is enabled. ; Run the command pureds role list to confirm that role-group mappings are securely defined for array roles. ; Test the configuration: Run the command pureds test to verify that the array can successfully resolve the URIs, bind to the directory using the credentials, and locate the mapped groups without errors.

How it is fixed

Fix method: Guidance or infrastructure patch

To align with the security recommendations, configure the management directory service with your LDAP/AD server parameters, map your directory groups to Purity//FA roles, and rigorously test the connection before enabling it. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Directory Service panel, select the Array Management button, then click the edit icon. ; Enter your LDAP server URIs (using ldaps:// for encrypted connections), Base DN, Bind User, and Bind Password. Click Save. ; In the Roles section of the panel, click the edit icon.