Michel--NL Regular Contributor.
Regular Contributor.
994 views

New user registration -> groupmembership

We are using SSPR mainly as an password reset tool. But we are looking to use it as an self registration system for users.
Users have to be placed in an Microsoft AD server.
The basic is working and users are placed in the AD.

But is it possible to make an user member of an group in the AD?
0 Likes
6 Replies
Knowledge Partner
Knowledge Partner

Re: New user registration -> groupmembership

Are you using SSPR directly against AD?

Or do you have SSPR to eDirectory and an IDM driver Connection to AD?

I'm not sure you can add Group membership directly to AD, that attribute only exist on the Group object in reality. Not sure on how AD would translata an add of a Group in the groupmembership attribute of the user.

Should all users be member of the same Group or is there some logic you want to have to decide Groups memebership?
0 Likes
Michel--NL Regular Contributor.
Regular Contributor.

Re: New user registration -> groupmembership

Yes, we are using it directly against the AD.

There should be some logic to place users in different groups. But for the moment I only want to be the user placed in one static group. Just to see if it works. The complexity can be done when it works 😉
0 Likes
tschloesser Outstanding Contributor.
Outstanding Contributor.

Re: New user registration -> groupmembership

So far as I can recall SSPR does only support direct LDAP operations on the userobject itself.
But If you are able to define/use a webservice which is capable to add a user to a given group SSPR offers the option to call that service.

As Joakim wrote, the AD API does not allow the groupmembership to be configured on the user object directly, therefore only the second option will possibly work.
0 Likes
Michel--NL Regular Contributor.
Regular Contributor.

Re: New user registration -> groupmembership

We don't have an webservice where I'm aware of to do these functions.

Can SSPR not change the groupmembership object and add the user?
0 Likes
Knowledge Partner
Knowledge Partner

Re: New user registration -> groupmembership

On 3/27/2018 7:44 AM, MichelatNL wrote:
>
> We don't have an webservice where I'm aware of to do these functions.
>
> Can SSPR not change the groupmembership object and add the user?


SSPR is not a do everything tool. It is focussed on users. Your request
requires a change to another object (group) since membership is stored
on the group (in eDir on the user also, reciprical linkages, in AD there
is a pseudo attr called memberOf on the user, but it is a dynamic query
resolved only when you look at it and not writable).

So this seemingly simple change is a largish scope expansion of what
SSPR does.
0 Likes
Michel--NL Regular Contributor.
Regular Contributor.

Re: New user registration -> groupmembership

ok..thats a confident no it can't be done with SSPR.
Thnxs
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.