Yan
Yan

Reputation: 328

Disable Keycloak user from LDAP

I have synchronization between OpenLDAP and Keycloak via user federation, everything works fine(import from LDAP, authentication, etc). I need to have a possibility to disable Keycloak user from LDAP. I know that it is possible to disable a user from Keycloak, but is there a way to do the same from LDAP? Maybe add some attribute to LDAP record which will be mapped to Keycloak record and user will be disabled.

My goal is: disable authentication for a particular user using LDAP.

Upvotes: 1

Views: 2462

Answers (1)

kikkauz
kikkauz

Reputation: 1

I managed to make it work with fedora 389. I created an "enabled" attribute as String and created the corresponding mapper in the federation configuration as "user-attribute-ldap-mapper". Now when I change the "enabled" switch in keycloak the change is propagated to ldap

Upvotes: 0

Related Questions