Reputation: 328
I have synchronization between OpenLDAP and Keycloak via user federation, everything works fine(import from LDAP, authentication, etc). I need to have a possibility to disable Keycloak user from LDAP. I know that it is possible to disable a user from Keycloak, but is there a way to do the same from LDAP? Maybe add some attribute to LDAP record which will be mapped to Keycloak record and user will be disabled.
My goal is: disable authentication for a particular user using LDAP.
Upvotes: 1
Views: 2462
Reputation: 1
I managed to make it work with fedora 389. I created an "enabled" attribute as String and created the corresponding mapper in the federation configuration as "user-attribute-ldap-mapper". Now when I change the "enabled" switch in keycloak the change is propagated to ldap
Upvotes: 0