Active Directory Group Integration for User Management in Fusion Manage (Standard Feature Request)

[schmidt_ole-jendrik]

Hello together,

Currently, user management in Fusion Manage requires manual effort or custom integrations, which are neither scalable nor aligned with IT security standards (ISO 27001) in enterprise environments.

This Idea is about implementing a standard, out-of-the-box solution for managing users and their permissions in Fusion Manage via Microsoft Active Directory (AD) Groups. 

This functionality is essential for large organizations aiming for increased security and better compliance with internal and external standards. Importanly, this capability must be part of the Fusion Manage standard configuration to avoid the need for custom middleware or bespoke development - which often requires  unavailable internal capacity and ongoing maintenance.

By enabling native AD group integration, Autodesk would significantly enhance the usability, scalability and security of Fusiion Manage - making it a more viable option for enterprise-wide deployment.

Kind regards,

Ole-Jendrik Schmidt

[tfrascone]

Simply mirroring how Autodesk Vault leverages AD is a good start.

[dmarushak]

Agree that mirroring Vault would fix this and would like to see this implemented but let me clarify.

Vault uses AD groups because it is an on prem tool. I understand you can't do that with a SaaS product. However, what I would like to see is that we can add an Entra group from Azure. This would allow us to perform the following.

1. IDP SSO is already enabled via Autodesk account. Therefore a user must be in a group and authenticate to through SSO to login to their Autodesk account and therefore the platform.

2. (NEW Request) - Instead of going into Fusion and adding people, let us add an Azure Entra group. Let us also add roles in Fusion to that Azure Entra group. This would then allow us to manage the onboarding and offboarding of individuals in Azure.