active directory group sync

[artron]

Greeting All,

We have about 20,000 users and want to sync and continue to maintain a department as a subset of this group of users in AEM as a group. Is this possible using an Active Directory group via LDAP?

I have explored doing this by the following without success:

• adding the group via /useradmin
• adding the group via /crx/explorer group administration
• tried the sync user function in JMX console

Thanks. We are on verison 5.6

[Jörg_Hoh · Accepted solution]

Not sure, what you want to achieve.

You can sync users and groups based on LDAP filters into AEM. Normally one would maintain the group memberships and authentication stuff in the AD, and just use the groups in AEM, probably as basis for ACLs. That's the standard approach when you want to use a LDAP sync.

Jörg