# Managed LDAP and OpenID

**URL:** <https://community.dynatrace.com/t/managed-ldap-and-openid/37569>\
**Category:** Dynatrace Managed\
**Tags:** user-management, dynatrace-managed, sso\
**Created:** [December 5, 2022, 9:20am UTC](https://community.dynatrace.com/t/managed-ldap-and-openid/37569 "2022-12-05T09:20:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yosi\_Neuman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/yosi_neuman/32/9845_2.png) [@Yosi\_Neuman](https://community.dynatrace.com/u/Yosi_Neuman)\
**Post date:** [December 5, 2022, 9:20am UTC](https://community.dynatrace.com/t/managed-ldap-and-openid/37569/1 "2022-12-05T09:20:37Z")

</div>

Hi guys,

The customer is connected to local LDAP for the user repository and asks to use SSO with OpenID on Azure.

Strand Login working perfectly.

SSO Logins are failing and we see it from Events.

Where can we see the errors in Dynatrace or Azure to understand why the SSO logins are failing?

BTW Should we remove the group query from the local LDAP and use it from OpenID on Azure?

Thanks in advance for your inputs here

Yos

---

<div class="post-metadata">

**Author:** ![avdveen](https://avatars.discourse-cdn.com/v4/letter/a/ed8c4c/32.png) [@avdveen](https://community.dynatrace.com/u/avdveen)\
**Post date:** [December 5, 2022, 9:30am UTC](https://community.dynatrace.com/t/managed-ldap-and-openid/37569/2 "2022-12-05T09:30:06Z")

</div>

Hi [@Yosi\_Neuman](https://community.dynatrace.com/user/6931), I think this thread might help you: [https://community.dynatrace.com/t5/Dynatrace-Open-Q-A/integrate-both-LDAP-amp-SAML-2-0-authentication-protocols/td-p/119747](https://community.dynatrace.com/topic/119747)

If I understand Radek’s solution correctly, you have to do the reverse of what you asked: _"__Should we remove the group query from the local LDAP and use it from OpenID on Azure?"_ 🙂