# AD connection issues with ForiegnSecurityPrincipals

**URL:** <https://forum.inductiveautomation.com/t/ad-connection-issues-with-foriegnsecurityprincipals/84047>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [January 10, 2024, 4:25pm UTC](https://forum.inductiveautomation.com/t/ad-connection-issues-with-foriegnsecurityprincipals/84047 "2024-01-10T16:25:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![t.cobbs](https://avatars.discourse-cdn.com/v4/letter/t/50afbb/32.png) [@t.cobbs](https://forum.inductiveautomation.com/u/t.cobbs)\
**Post date:** [January 10, 2024, 4:25pm UTC](https://forum.inductiveautomation.com/t/ad-connection-issues-with-foriegnsecurityprincipals/84047/1 "2024-01-10T16:25:05Z")

</div>

we are trying to use foreign security principals that are members another domain in the same forest. we have our groups setup as domain local groups so that we can add FSP to them. but we can not get the ldap query to pull them in. what is the ldap query we would need to pull these users in? for example user 999999 is a FSP and a member of our local AD group , cn=group95,dn=home, dn=com.

---

<div class="post-metadata">

**Author:** ![Jesse\_Van\_Hill](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jesse_van_hill/32/56876_2.png) [@Jesse\_Van\_Hill](https://forum.inductiveautomation.com/u/Jesse_Van_Hill)\
**Post date:** [April 8, 2024, 4:04pm UTC](https://forum.inductiveautomation.com/t/ad-connection-issues-with-foriegnsecurityprincipals/84047/2 "2024-04-08T16:04:31Z")

</div>

Have you tried connecting to the global catalog of your domain to see if that would resolve the issue?

A stack trace would be helpful as well.