Expand my Community achievements bar.

Don’t miss the AEM Skill Exchange in SF on Nov 14—hear from industry leaders, learn best practices, and enhance your AEM strategy with practical tips.
SOLVED

AEM 6.1 + LDAP group sync

Avatar

Level 5

Does AEM 6.1 supports LDAP group sync OOTB 

Assuming i have LDAP configured

user1 , user2 part of group1

and 

user3 , user 4 part of group2

when user1 & user 3 authenticates via LdapIdentityProvider and user synced additionally their group should be auto created /synced in AEM repository

user1,user2,user3,user4 - are part of people OU

group1,group2- are part of group OU

- Also not able to find syncGroup in JMX does the syncUser also syncs the group from LDAP into AEM repository

- Want to achive the below as in https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html

"Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme."

Similar request on AEM 6,x without much conclusion

http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

1 Accepted Solution

Avatar

Correct answer by
Level 5

it seems to work :-) and the group for which user is associated gets auto created in AEM

View solution in original post

5 Replies

Avatar

Level 10

Hi Sri,

LDAP integration will sync only the Users. You will have to create the same groups as of LDAP groups, so that when the users are syncd from LDAP, they are mapped to the respective groups.

Avatar

Level 5

Thanks lokesh :-)

But the AEM 6.1 LDAP configuration document says it can sync group, is there any thing missed out ? 

A Word on Group Affiliation

Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme.

https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html

 

Avatar

Correct answer by
Level 5

it seems to work :-) and the group for which user is associated gets auto created in AEM