Diana,For that you might have to wither extend login module and use your own on top of LDAP one (And let that module create user or group) or use http://wem.help.adobe.com/enterprise/en_US/10-0/core/administering/ldap_authentication.html#Callbacks feature. In this you can disable User sync and then ...