AEM 6.1 + LDAP group sync

[varshsr]

Does AEM 6.1 supports LDAP group sync OOTB 

Assuming i have LDAP configured

user1 , user2 part of group1

and 

user3 , user 4 part of group2

when user1 & user 3 authenticates via LdapIdentityProvider and user synced additionally their group should be auto created /synced in AEM repository

user1,user2,user3,user4 - are part of people OU

group1,group2- are part of group OU

- Also not able to find syncGroup in JMX does the syncUser also syncs the group from LDAP into AEM repository

- Want to achive the below as in https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html

"Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme."

Similar request on AEM 6,x without much conclusion

http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

[varshsr]

Please share any inputs

[Lokesh_Shivalingaiah]

Hi Sri,

LDAP integration will sync only the Users. You will have to create the same groups as of LDAP groups, so that when the users are syncd from LDAP, they are mapped to the respective groups.

[varshsr]

Thanks lokesh :-)

But the AEM 6.1 LDAP configuration document says it can sync group, is there any thing missed out ? 

A Word on Group Affiliation

Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme.

https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html

[Mayur_2]

Even similar reference I got in Apache OAK documentation, too.

See the ref. as below:

http://jackrabbit.apache.org/oak/docs/security/authentication/usersync.html

http://jackrabbit.apache.org/oak/docs/security/authentication/externalloginmodule.html

https://github.com/Adobe-Marketing-Cloud/aem-ldap-tutorial/blob/master/step-02/tutorial-02-configure...

[varshsr · Accepted solution]

it seems to work :-) and the group for which user is associated gets auto created in AEM