CODEWITHSUNDEEP
wso2-identity-server
fipries
fipries

Reputation: 386

WSO2 IS Secondary userstore from ldap explorer

I have wso2 IS 5.3.0 with several user stores. I want to connect my app to the embebed ldap and access the user in the secondary user stores, but I only see the users in the primary user store.

How I can see the user in the secondary user stores con connect an application to the WSO2 IS ldap?

The aim is to have serveral user stored merged in just one, the IS ldap, and connect legacy applications to that merged LDAP. Is this approach wrong?

Upvotes: 0

Views: 345

Answers (2)

gusto2
gusto2

Reputation: 12087

May I use some specific configuration to connect to the ldap to can see the whole set of users?

Multiple user stores are completely separate, their own users, realm name, etc. In theory - your application you could use WSOIS API to access user information (with the realm prefix, such as usenr identity is userstore_realm\username

But as it is already mentioned in the comments, you don't see multiple LDAP stores as a single LDAP

The aim is to have serveral user stored merged in just one, the IS ldap, and connect legacy applications to that merged LDAP. Is this approach wrong?

What could you do is "inbound" user provisioning. Effectively when a user is authenticated (using an external IS, secondary userstore, ...), the user could be provisionined ( imported ) to the primary userstore

Though it is possible, I won't recommend this approach as you will have duplicates out of control (e.g. when reseting the password)

Upvotes: 0

Jayanga Kaushalya
Jayanga Kaushalya

Reputation: 2744

Please follow this documentation[1] to configure multiple secondary user stores with WSO2 IS 5.3.0. Yes you can add multiple user stores to Identity Server and let the applications from outside see those as a single user store through Identity Server.

[1] https://docs.wso2.com/display/IS530/Configuring+Secondary+User+Stores

Upvotes: 0

Related Questions