Hello,
We have a SAP Netweaver Portal connected with a flat LDAP via SSO. The connection tests are ok and we have fulfilled all the requirements.
The users are in OU=Persons,DC=xxxx,DC=yyyy,DC=corp
And the group is in OU=groups,OU=aaaa,OU=bbbb,DC=xxxx,DC=yyyy,DC=corp
But, the problem is that every user in the LDAP can access the portal, not only the users belonging to our desired group.
We cannot modify the structure of our LDAP, because some applications depend of it, we cannot apply negative filters, because most users of our LDAP are users of other applications and they dont have any role on the Portal and we cannot block every user because there are thousand of them.
Is there any solution to only let users of our group SSO on our Portal?
Thanks, and regards