CA Service Management

It is possible to sincronize profile picture in SDM (that comes from Active Directory) with profile picture in USS?

yes

really easy to do

going to the liferay portal setting

go to authentication and select the ldap tab

add the settings for your ldap server(s) if not already done.

under the settings

look for the Portrait field add the value "thumbnailPhoto" there

Make sure that both import are enabled

and the allow user to automatically login is flagged on under the general tab

That it when a new user will first time logon his profile included his picture if exist will be imported..

you starting to own me some beers..

/J

My authentication is already configured to use EEM.

I can use both configured?

yes and either more if you want including full SSO that eem don't provide

I did made a document in this community around that in the past.

You may do a quick search then..

/J

I tryed to configure this, filled the connection part, did a connection test and liferay connected to ldap correctly.

After I filled the users part, but clicking in "Test LDAP Users" returned no users.

HI,

Not returning contact if connection is successful can be cause by you base DN not pointing to correct folder, a wrong search filter or not enough permissions on AD for the search.

You may want to adapt to reflect your AD structure.

If you are sure that the user utilized for the connection principal have enough permissions, try to make the base DN to be at top of your domain for testing purpose. i.e. dc=mydomain,dc=com

below also a example of a simple AD search filters:

/J

Thanks

My authentication and Import Seach Filter are wrong.

I put your example and it worked.

One more question.

The system will synchronize the image profile only for new users created or it is possible to do it for existing users in uss database?

the doc I was referring to..

https://communities.ca.com/docs/DOC-231172837-ussssoclasszip

/J