SSO Implementation

[medhik]

We are looking at implementing SSO for AEM instance (IdP will use LDAP AD).

A couple of questions that I have,

1. Do we first have to manually create the user(s) in AEM (with same userid as in AD)?

2. Do we also have to first create the groups and add member appropriately to ensure permissible access to the repository?

Otherwise is there an alternate way to have the users and groups created automatically by pulling in data from AD?

[smacdonald2008]

Here is the AEM docs on SSO - i hope this can help you: 

https://docs.adobe.com/docs/en/aem/6-2/deploy/configuring/single-sign-on.html

[smacdonald2008]

Also - here is a related GEMS session that may help too: 

https://docs.adobe.com/ddc/en/gems/saml-and-aem.html

[varunmitra · Accepted solution]

Please find the answers to your questions inline:

1. Do we first have to manually create the user(s) in AEM (with same userid as in AD)? Yes, users need to be present in AEM for SSO to work

2. Do we also have to first create the groups and add member appropriately to ensure permissible access to the repository? Yes, user need to have all the ACL's defined

Otherwise is there an alternate way to have the users and groups created automatically by pulling in data from AD? Yes, you can import users from LDAP. You can sync a userlist using CURL[1]

Also I have attached a document that I created a while back. The steps were done using Apache.

[1] https://helpx.adobe.com/experience-manager/kb/how-to-synchronize-user-with-ldap.html