I want to connect crowd to a large Active Directory with local groups

[Jan-Christian Arnold]

Hello

I'm looking for a way to use delegated auth with local groups.

I know you can synch connector, but the directory is much larger than my crowd license. So for a synch I get an error.

Only a small fraction of the AD users will use the services behind crowd!So I'm looking for a delegate auth with local groups.

Does anyone have a solution?

Thanks

[Jan-Christian Arnold · Accepted solution]

Hi guys,

thanks for your replies!

your are both so right, but I could not see. My "problem" was that I deactivted the permissions for user and group creation. I did that because I'm connecting to an read-only AD, so I thought.

What I didn't grasp was that the Permissions are only valid for the crowd part of directory!

Maybe you can add such da description to the wiki page https://confluence.atlassian.com/x/HIGlBw

[Caspar Krieger]

Crowd's Delegated Authentication directory should allow you to specify the groups locally (i.e. in Crowd). Is there a reason why this doesn't work for you?

[Tiago Comasseto]

Hi Jan-Christian, since you're intending to have ony a small fraction of the users from your AD, maybe a good solution for you is reduce the scope of your LDAP directory in Crowd.

I hope it helps.

Cheers