Moving secrets from Ldap Identity provider XML to Hashicorp vault (secrets management system) | Community
Skip to main content
S
sarthakuiit
Level 2
March 16, 2022
Solved

Moving secrets from Ldap Identity provider XML to Hashicorp vault (secrets management system)

  • March 16, 2022
  • 2 replies
  • 783 views

We are using LdapIdentityProvider.xml to connect to our organization's Ldap interface for the login functionality in AEM.

As a security measure, We want to move the password information to 'vault secrets management system'. We have a custom service , which we use to read vault secrets.

Could anyone please help with a way to extend AEM Ldap service (not sure of the exact name of service) , so that we can add our custom code to read Ldap secret from vault ?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Kiran_Vedantam

Hi @sarthakuiit 

 

To achieve this

  1. Create a Vault Configuration

  2. Update LDAP Identity Provider Configuration

    Modify the LdapIdentityProvider.xml configuration to use placeholders for the LDAP credentials, which will be replaced at runtime. 

  3. Create a Custom OSGi Service

  4. Reference Custom Service in LDAP Identity Provider

    1. Modify the LDAP Identity Provider code to reference your custom service for retrieving the LDAP password.

  5. Update Component and Service References:

Hope this helps!

 

Thanks,

Kiran Vedantam.

2 replies

kautuk_sahni
Community Manager
kautuk_sahniCommunity Manager
Community Manager
December 5, 2023

@aanchal-sikka @jorganer @lokesh_vajrala @ksh_ingole7 @kiran_vedantam @uppari_ramesh Can you please review this unanswered question? Appreciate your thoughts on this.

Kautuk Sahni
Kiran_Vedantam
Community Advisor
Kiran_VedantamCommunity AdvisorAccepted solution
Community Advisor
December 11, 2023

Hi @sarthakuiit 

 

To achieve this

  1. Create a Vault Configuration

  2. Update LDAP Identity Provider Configuration

    Modify the LdapIdentityProvider.xml configuration to use placeholders for the LDAP credentials, which will be replaced at runtime. 

  3. Create a Custom OSGi Service

  4. Reference Custom Service in LDAP Identity Provider

    1. Modify the LDAP Identity Provider code to reference your custom service for retrieving the LDAP password.

  5. Update Component and Service References:

Hope this helps!

 

Thanks,

Kiran Vedantam.

    Terms & ConditionsAccessibility statement

    Loading footer...