In CONF-22295, we created a jsp to cater upgrade from instances that used OSUser management and LDAP.

Unfortunately the script also migrated users that are meant to stay local to the "Delegated LDAP Directory". These users are not able to login as a result despite that they exist in CWD_USER table and appear valid.

We need to:

• Either make these kind of users able to login while in the Delegated Directory
• Or move them to Internal Directory automatically (see CONF-22297): Essentially we should make the upgrade task smart enough to identify which users are valid LDAP users; it needs to connect to the LDAP server and verify them then move the users who do not exist in LDAP to the Internal directory so they can login.