Possible to import a group before member login? (Delegated LDAP)

[Chris Williams]

Is it possible to import a group from LDAP (using Delegated LDAP authentication) before a member of that group has logged in? It is not an option to do a full sync because we have over 260,000 groups.

We use course section groups to assign space permissions. When an instructor requests a space for a course, it is likely that the student enrollment group hasn't yet been created on Confluence because a student hasn't logged in yet to pull the group in.

It seems like there must be a way to do this because, when upgrading from 3.4 to 3.5, the migrate-external-memberships pulled in all members of groups that were on the system from LDAP. We absolutely need to figure out a way to do this before we can upgrade.

[Bruna Griebeler]

The only thing I can image so far is to actually perform a full sync.

However since you have a lot of groups and they are segmented in sections, you could create a User Directory for each of this sections.

Then you could have like, 10 User Directories, each one using a LDAP filter for a section of your LDAP. Or you can change the filter everytime you want to sync a group, putting just the group inside the filter.

Hope it helps!