Allow LDAP authentication, but only for previously created accounts

[Former Member]

Hello,

I'd like to configure LDAP authentication so that users can only log in if I have previously created an alias (either Enterprise or LDAP) for them. Currently, anyone who belongs to a mapped group can get in with their LDAP credentials. What I need is the ability to map a group but not let everyone in from that group, and I haven't seen a combination of options that will allow me to do that. Is this possible?

Thanks.

[julian_jimenez · Accepted solution]

Pedro,

Check this thread as it was asked this very same question not long ago.

http://scn.sap.com/thread/3616383

The best solution was to enable Trusted Authentication.

Regards,

Julian

[former_member197037]

Hi Pedro,

Disabling users from their properties in CMC is one way of acheiving this.

This way though all the users will be mapped in BO, they wont be able to login.

This may be a tedious task depending on the number of users you need to disable.

You can enable users as and when you need them to access BO.

Regards,

Nagendra