AEM 6.1 + LDAP group sync

Forum|Forum|10 years ago
November 18, 2015
5 replies
2448 views

Does AEM 6.1 supports LDAP group sync OOTB

Assuming i have LDAP configured

user1 , user2 part of group1

and

user3 , user 4 part of group2

when user1 & user 3 authenticates via LdapIdentityProvider and user synced additionally their group should be auto created /synced in AEM repository

user1,user2,user3,user4 - are part of people OU

group1,group2- are part of group OU

- Also not able to find syncGroup in JMX does the syncUser also syncs the group from LDAP into AEM repository

- Want to achive the below as in https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html

"Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme."

Similar request on AEM 6,x without much conclusion

http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__fffe-hi_does_anyoneh.html

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by varshsr

it seems to work :-) and the group for which user is associated gets auto created in AEM

varshsrAuthor

Level 5

Please share any inputs

Lokesh_Shivalingaiah

Level 10

Hi Sri,

LDAP integration will sync only the Users. You will have to create the same groups as of LDAP groups, so that when the users are syncd from LDAP, they are mapped to the respective groups.

varshsrAuthor

Level 5

Thanks lokesh :-)

But the AEM 6.1 LDAP configuration document says it can sync group, is there any thing missed out ?

A Word on Group Affiliation

Users synchronized through LDAP can be part of different groups in AEM. These groups can be external LDAP groups that will be added to AEM as part of the synchronization process, but they can also be groups that are added separately and are not part of the original LDAP group affiliation scheme.

https://docs.adobe.com/docs/en/aem/6-1/administer/security/ldap-config.html