Integration of AEM with LDAP

1. While integrating AEM with LDAP do we require SSO.

- Not really.

2. Currently, we have integrated AEM with LDAP without SSO, it is working but while creating the login page for a web application do we need Custom Authentication Handler, or what would be the best practice for the same.

- Is it an intranet application ? Would the end-users be using LDAP login credentialss to login into your Web app ?

3. In our project, there will be multiple user groups, we will be enabling the Closed user group functionality on certain pages after login. Will this be effective if we use Custom Authentication Handler or do we need to add a separate business logic.

- This should still work OOTB. If users can login, are part of the CUG group and have the access to the content  This should just work.

4. After integrating AEM with LDAP, we have to manually sync the users using syncAllExternalUsers() options. Can there be a solution to resolve the same?

- You can use the LDAP jmx mbeans to sync all users in one go or can rely on auto-create users so once the users login, the users are created with default set of groups.