SSO Implementation | Community
Skip to main content
medhik
medhik
Level 2
May 12, 2017
Solved

SSO Implementation

  • May 12, 2017
  • 3 replies
  • 1750 views

We are looking at implementing SSO for AEM instance (IdP will use LDAP AD).

A couple of questions that I have,

1. Do we first have to manually create the user(s) in AEM (with same userid as in AD)?

2. Do we also have to first create the groups and add member appropriately to ensure permissible access to the repository?

Otherwise is there an alternate way to have the users and groups created automatically by pulling in data from AD?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by varunmitra

Please find the answers to your questions inline:

1. Do we first have to manually create the user(s) in AEM (with same userid as in AD)? Yes, users need to be present in AEM for SSO to work

2. Do we also have to first create the groups and add member appropriately to ensure permissible access to the repository? Yes, user need to have all the ACL's defined

Otherwise is there an alternate way to have the users and groups created automatically by pulling in data from AD? Yes, you can import users from LDAP. You can sync a userlist using CURL[1]

Also I have attached a document that I created a while back. The steps were done using Apache.

 

[1] https://helpx.adobe.com/experience-manager/kb/how-to-synchronize-user-with-ldap.html

3 replies

smacdonald2008
smacdonald2008
Level 10
May 12, 2017

Here is the AEM docs on SSO - i hope this can help you: 

https://docs.adobe.com/docs/en/aem/6-2/deploy/configuring/single-sign-on.html

smacdonald2008
smacdonald2008
Level 10
May 12, 2017

Also - here is a related GEMS session that may help too: 

https://docs.adobe.com/ddc/en/gems/saml-and-aem.html

varunmitra
Adobe Employee
varunmitraAdobe EmployeeAccepted solution
Adobe Employee
May 12, 2017

Please find the answers to your questions inline:

1. Do we first have to manually create the user(s) in AEM (with same userid as in AD)? Yes, users need to be present in AEM for SSO to work

2. Do we also have to first create the groups and add member appropriately to ensure permissible access to the repository? Yes, user need to have all the ACL's defined

Otherwise is there an alternate way to have the users and groups created automatically by pulling in data from AD? Yes, you can import users from LDAP. You can sync a userlist using CURL[1]

Also I have attached a document that I created a while back. The steps were done using Apache.

 

[1] https://helpx.adobe.com/experience-manager/kb/how-to-synchronize-user-with-ldap.html

Terms & ConditionsAccessibility statement

Loading footer...