Background of The Request

Customers might choose the option to use CONNECTOR method instead of DELEGATION as they want the group membership retrieval process and authentication into two processes instead of at the same time. Since CONNECTOR retrieve group membership using the LDAP synchronisation process, it is not necessary to retrieve the group membership during authentication process as well.

By forcing user membership retrieval during authentication process could cause performance issue during authentication process. Especially if customer is using SSL connection due to this bug. This authentication performance issue will get worst if nested group membership is enabled.

Propose Solution

Provide an option for administrators to skip user membership retrieval during authentication in the directory configuration.