AEM Integration: How to import groups from ldap into AEM? | Community
Skip to main content
Magicr
Magicr
Level 6
October 4, 2022
Solved

AEM Integration: How to import groups from ldap into AEM?

  • October 4, 2022
  • 2 replies
  • 963 views

Hello,

currently I'm trying to import users and groups from ldap to AEM reporsitory. I followed the steps from https://aem4beginner.blogspot.com/how-to-synchronize-ldap-users-and . The general import of users into AEM works. My question is how to import groups? I double checked the defined ldap filter with an ldap browser and according this program there are no errors. I checked the error.log and other log files, there no errors.

Thanks in advanced

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Magicr

Thanks for your answer. Accendently I found a salution for my problem just now. All existing documententation don't describe in detail how this module exactly work 😓. Here a small explaination for further visitors:

First thing: You cannot import any ldap groups only.

In configuration "Ldap Identity provider" you can define a user filter. If you define a group filter as well every single ldap user will apply with defined group filter. I found it out by reading the debug output. In general the attribute member in group object contains the member of this group. At the end of the dialog exists a configuration field wich allows you to connect each filters together.

After this and the others configuration, the result is: only the groups will be imported which are used by previously selected users.

2 replies

A
AEM_Seeker
October 5, 2022

.

A
AEM_Seeker
October 5, 2022

@magicr  Assuming that you have configured "Group base DN" property for LDAP Identity Provider and make sure  that your group Base DN is correct because there could be a possibility that users and groups belongs to different DN.

Read here more about similar issue:
https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/activedirectory-group-sync-issue-using-aem-ldap/m-p/305396

 

    Magicr
    MagicrAuthorAccepted solution
    Level 6
    October 5, 2022

    Thanks for your answer. Accendently I found a salution for my problem just now. All existing documententation don't describe in detail how this module exactly work 😓. Here a small explaination for further visitors:

    First thing: You cannot import any ldap groups only.

    In configuration "Ldap Identity provider" you can define a user filter. If you define a group filter as well every single ldap user will apply with defined group filter. I found it out by reading the debug output. In general the attribute member in group object contains the member of this group. At the end of the dialog exists a configuration field wich allows you to connect each filters together.

    After this and the others configuration, the result is: only the groups will be imported which are used by previously selected users.

      Mayank_Gandhi
      Adobe Employee
      Mayank_GandhiAdobe Employee
      Adobe Employee
      October 6, 2022

      @magicr in case you run into an issue creating a filter than the LDAP query browser tool are a lightweight way to test and then you can map the attributes in aem.

        Terms & ConditionsAccessibility statement

        Loading footer...