Expand my Community achievements bar.

Enhance your AEM Assets & Boost Your Development: [AEM Gems | June 19, 2024] Improving the Developer Experience with New APIs and Events
SOLVED

Syncing Users and Groups between two AEM authors.

Avatar

Level 2

Hi All ,

Currently we have a requirement to sync users and Groups between two AEM authors in different environments.
Basically they want if a user is created in one aem instance it should get sync automatically to another instance.
Any help will be much appreciated.

Current AEM version : AEM 6.3

Thanks in Advance !
Kind Regards,
Kaushik

1 Accepted Solution

Avatar

Correct answer by
Employee

Hello Kaushik,

- One option is to use LDAP [1], where you can manage users and groups at one place and then sync to different authors.

- Another option is to create a package of users and groups in the author and automate the package replication to another author. Check link [2]

Curl command for replication:

curl -u admin:admin -X POST -F path="/content/path/to/page" -F cmd="activate" http://localhost:4502/bin/replicate.json

To create a package using the package manager for /home/users & /home/groups and permissions. Please follow doc [3]

[1] https://helpx.adobe.com/ca/experience-manager/6-3/sites/administering/using/ldap-config.html

[2] https://adobe-consulting-services.github.io/acs-aem-commons/features/automatic-package-replicator/in...

[3] Migrate users, groups, and ACLs between AEM instances

Regards,

Vishu

View solution in original post

4 Replies

Avatar

Employee

I have seen user synch in publish instances [1] as well as author to publish [2]

[1] User Synchronization

[2] How to Replicate users and groups from author to publisher

Avatar

Correct answer by
Employee

Hello Kaushik,

- One option is to use LDAP [1], where you can manage users and groups at one place and then sync to different authors.

- Another option is to create a package of users and groups in the author and automate the package replication to another author. Check link [2]

Curl command for replication:

curl -u admin:admin -X POST -F path="/content/path/to/page" -F cmd="activate" http://localhost:4502/bin/replicate.json

To create a package using the package manager for /home/users & /home/groups and permissions. Please follow doc [3]

[1] https://helpx.adobe.com/ca/experience-manager/6-3/sites/administering/using/ldap-config.html

[2] https://adobe-consulting-services.github.io/acs-aem-commons/features/automatic-package-replicator/in...

[3] Migrate users, groups, and ACLs between AEM instances

Regards,

Vishu

Avatar

Employee Advisor

The only recommended way to do that(Sync users between AUTHORS) is using an external login Module like LDAP or SAML which 90 percent of AEM customers already use.

Users will be maintained on the external system and synced to AEM when a user logs in.

Check [1] and [2] for more details.

[1]Configuring LDAP with AEM 6

[2]SAML 2.0 Authentication Handler

Avatar

Level 10

Hi,

I also strongly suggest using LDAP to synchronize all your users and groups (you could apply this to your Author instances and your Publishers).

Just one question though: you need to sync your users and groups but what about their access rights? Is that also a concern?