Augmentation does not work with OpenDJ

[Odi81]

We are using SharePoint with OpenDJ. Augmentation does not work, because group membership attribute is "isMemberOf". https://backstage.forgerock.com/docs/opendj/2.6/configref/is-member-of-virtual-attribute.html

LDAP query only includes attributes "memberOf" and "uniquememberof". Result in Log message: [LDAPCP] Got 0 group(s) for user "###" in 568 ms from LDAP server "LDAP://###.com:636"

We need an option to change attributes used for augmentation or this there a way to configure?

[Yvand]

@Odi81 I am away this week but I will come back to you next week on this topic Thank you for your patience

[Yvand]

Coming back on this topic, I confirm this cannot be configured, unfortunately. Is it something you actually need, or just a FYI?

[Odi81]

@Yvand Yes, we need group based authorization. We have tested the claims provider after extending the GroupMembershipAttributes variable and it worked.

If this can be included in a future release, the issue will be solved.

[Yvand]

Noted. Indeed, for the time being you can manually edit this property to include your LDAP property, which is exactly what the code change would do anyway. Thanks for reporting this

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.