Hi,Thanks for the info, I did not specify this earlier , In my case i do not want to store end user profile in AEM so after external authentication(SAML) want to drive restricted menus on headers having a teaser and different menu campaigns attached created by authors .This gives authors to preview ...

       yes these 200k users will be mapped to multiple roles in identity and would like to use that information via client context custom data store for authorization can white list the URLs for roles with regex patterns as custom config acl like we white list selectors or use saml to authorize the ...

Hi All,Using AEM as an intranet portal  - following are my thoughts on enabling role based menu navigation for end user - some links hidden for certain roles / some links disabledoption 1 - client context would be my recommendation any view on this or any other better?1) use the client context with ...

Thanks sham - That's exactly we need by which internet and intranet content are only replicated to required publish.

How to setup AEM replication agents for internet and intranet site which has same branded experience but with 2 different security setting and authorization based on different user groups.Also the is a possibility for future localization as well. Here is my thought please add / validate the samecrea...

Thanks Mac - Also have additional request - which I have dropped a separate message  

Additionally In case of OOTB LDAP authentication , the actual authentication happens against the LDAP and not against AEM even if profiles are cached in AEM via syncAssuming the OOTB AEM- LDAP takes care of users getting blocked in LDAP and hence blocked into site as auauthentication happens with LD...

Please share if any sync issue / limitation on number of users that can be synced from LDAP into AEM ,  profile sync possibly for personalization Alternatively also thinking about loading custom client context querying the LDAP after OOTB authentication without any user sync to restrict large number...

Thanks Opkar . I agree if teams setup  that way separately .Some times due to cost constraints there could be scenarios when the same page is served for both  intranet & internet with different dispatchers for intranet (inside firewall) & internetBut IDP not abstracting intranet & internet authentic...

Assuming that AEM supports different types of authentication applied on to same homepage urlSay i have LDAP & SAML for the intranet & extranet sites and have same home page served via different dispatcher  i guess i can configure LDAP JAAS as a final login module & SAML handler as high priority so i...