nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Active Directory Authentication & registration

senthil_chinnai

Hi,

I am new to Alfresco, I need to enable Active Directory authentication. I have followed instructions on wiki and it imports all users data at the startup.

I would like to authenticate users and register upon successful authentication. I have seen one thread for that, but it doesn't have step by step process. Can any one share the document to achieve the functionality please?

Thanks,
Senthil.

Find more posts tagged with

Comments

andy

Hi

To clarify, do you want to

1) pull/add/update user and group information from LDAP as user authenticate?

2) audit authentication?

Regards

Andy

senthil_chinnai

Andy,

Yes exactly, Please help me in doing that.

Thanks,
Senthil.

andy

Hi

See the audit information on the wiki.
http://wiki.alfresco.com/wiki/Audit#Configuration_Guide

Regards

Andy

senthil_chinnai

Thanks Andy. How to disable importing all users and groups at the server startup and register only the authenticated users.

Thanks,
Senthil.

andy

Hi

It is possible to create people as they log in. At the moment there is no support to pull information out of LDAP as people log in.

I know people are rolling their own code to do similar stuff (e.g. SSO filters that pull personal information from the headers provided by the SSO framework - whatever that may be - and sync up user and group info)

There would be a few alternatives.

1) Pull people as they log in - you would have to write some code

2) Sync a limited set of people from LDAP (by limiting the query on some ldap attribute or group membership) - you would have to filter the users found on the query

3) LDAP update for known users (log in would create a default entry - at some time later the full details would be pulled from LDAP) - this would require less of a code change.

Regards

Andy