Authentication Process

The Group User LDAP module authenticates a user just as the LDAP Authentication module does, but will make additional requests to garner group membership information from LDAP and update the EMS server for authorization purposes.

For example, consider a user "Joe", who belongs to the "Engineering" group in the LDAP server. When an application connects to the EMS server using Joe's credentials, the information that Joe belongs to the Engineering group is passed back up to the server after a successful authentication. If access controls are set up in EMS for the group Engineering, then Joe inherits those permissions.