Configure Groups for LDAP Authentication


Quickly and easily change members from Grouper groups to LDAP. Perform the following steps to configure groups for LDAP authentication and authorization.

  1. Log in to grouper.uchicago.edu.
  2. Find the desired group.
  3. From the Group Actions drop-down list, select Sync Group To. Note: You must have administrative privileges over the group you need to sync.
  4. Choose LDAP as the target system in the "Target System" drop down.
  5. Select Submit.

Membership changes take about an hour to go from Grouper to LDAP. Large updates (e.g., adding a new group with lots of members) may take longer.

Memberships can be found in the ucIsMemberOf LDAP attribute on an individual's LDAP entry and in ou=groups,dc=uchicago,dc=edu. For example, if the Grouper group uc:personal:blair:test-group was pushed to LDAP, members of that group would have a ucIsMemberOf value of "uc:personal:blair:test-group." Membership values can then be consumed either by applications using LDAP directly.