cancel
Showing results for 
Search instead for 
Did you mean: 

Portal/LDAP integration Group Restrictions for Authentication

Former Member
0 Kudos

All,

We have configured our Portal to do Multi-LDAP Directory Authentication.  We can see all the repositories and users and log in.  One directory is AD the other is Novell eDirEach directory belongs to a different division of the company (there isn't a centralized directory).  We've learned that there are many duplicate ID's (of course) and will most likely have to rename them.  Alternatively, a request has come from "above" 🙂 to see if we could configure the portal to only see (and authenticate) directory users that are in a particular group.  An example is, if I am jdoe in AD and there is a jdoe in eDir, and I am in the BigBusiness Directory group in AD and the jdoe in the eDir is NOT in the eDir BigBusiness Directory, they want it setup so that I can still log in.

Now, from my years of experience, I realize that once you connect to a Directory that all the users in that directory can be seen in that portal as valid users.  They might not have access (no roles assigned) but they can authenticate.

Here's the question:

Does Enterprise Portal even allow you to configure it in such a way that allows you to limit the users it can authenticate, based upon a Directory group?  I have never seen that done, but advances happen every day.  I thought I'd pose the question to the Community.

Thanks,

Accepted Solutions (0)

Answers (1)

Answers (1)

0 Kudos

Hello Leonard,

Did you get what you are looking for?  I have a similar issue in our company.  We need to restrict a child directory in our LDAP to access our portals, but I am not so sure if that is even possible.

Please share if you have any ideas.

Thank you,

Kind Regards,

Rao