When using LDAP authentication with MATLAB Web App Server R2020b, how can I give *all* authenticated users the User privilege?

I was able to set up authentication and authorization with MATLAB Web App Server. I can successfully set various Authors based on their username, and I have been able to allow a whole group of users as User by adding User privileges for the domain group they belonged to. What I would now like to do, however, is basically give all authenticated users the User privilege. I do not want to create new groups in our domain for this and assign all users to that group.

I thought that perhaps simply omitting the User "appRole" definition would work but it does not, only Authors can then login and no-one else. I also tried using a wildcard, e.g. something like:

      {
        "id": "User",
        "description": "user role can execute apps",
        "groups":{
            "memberOf": ["*"]
        }
      }

However, this does not seem to work either.

Answer 1

[MathWorks Support Team]

In order to be able to have users with the User privilege, the User role must be defined and you must define "users" and/or "groups" options to identify which users this role should be assigned to.

Now if you wish to assign the User role to all authenticated LDAP users, you can make use of the fact that normally all users are automatically part of the "Domain Users" group. More accurately, "Domain Users" is their primary group, which is important to note since primary group membership cannot be resolved through the "memberOf" attribute. However, you should be able to use the "primaryGroupID" attribute with group ID 513 then (the default integer ID for "Domain Users"). You would then get the following:

      {
        "id": "User",
        "description": "user role can execute apps",
        "groups":{
            "primaryGroupID": ["513"]
        }
      }