Closed User Groups (CUG) for 1 million users on AEM

Hi @supportmember ,

Yes, it is true that Adobe has disabled the Adobe Granite SAML 2.0 Authentication Handler in AEM as a Cloud Service (AEMaaCS) because it creates a new user node on the AEM publishers, which can cause scalability and performance issues when dealing with a large number of users.

To allow customers to read Closed User Group (CUG) content and view assets from the DAM, you can use the AEMaaCS-supported authentication mechanisms, such as Adobe I/O Runtime or Adobe Experience Platform Identity Service. These authentication mechanisms allow you to authenticate users and assign them to specific user groups, which can be used to control access to CUG content and assets.

For example, you can use Adobe I/O Runtime to authenticate users using OAuth 2.0 or JSON Web Tokens (JWT), and then use the AEMaaCS APIs to assign the authenticated users to specific user groups. You can then use the CUG feature in AEM to restrict access to content and assets based on the assigned user groups.

To handle a large number of users, you can use a scalable and distributed architecture, such as a serverless architecture using Adobe I/O Runtime or a microservices architecture using Adobe Experience Platform. These architectures can help you handle a large number of users and provide high scalability and performance.

It's important to note that the specific details and options for implementing CUG in AEMaaCS may vary depending on your specific AEMaaCS subscription and agreement with Adobe. It is recommended to consult with Adobe or your Adobe partner for more information and assistance with implementing CUG in your AEMaaCS environment.

Can you please point me to the documentation which says that SAML 2.0 authentication on publish is not available on AEM CS?

(I know a number of cases, where this is working.)

@supportmember Did you find the suggestion helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!