Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-5154:ZPA fails - Primary Group Not Found error

Centrify DirectControl ,  

28 September,16 at 05:10 PM

Problem:
ZPA primary group is set to use "Active Directory Group Membership" but the ZPA log shows the error  "Primary Group Not Found"

Background:
The setting  "Active Directory Group Membership"   provides a way of prioritizing which group should be the primary of the AD account.

Solution:
For the  ZPA primary group to be able to use the Active Directory Group Membership to set the primary group successfully two requirements must be met.

1. 
Each group listed in “Primary Group Auto-Provisioning” window needs to have a group profile

2.  The AD account needs to be a direct member of the group listed. It cannot be in a group that is a member of the group that is being used.


 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.