Details
-
Suggestion
-
Resolution: Duplicate
-
None
-
None
-
Crowd 2.1+, apparently this feature worked fine before 2.1
Description
As can be seen in the Crowd 2.1 upgrade notes a feature was changes which now prevents companies from isolating groups between applications.
In previous versions of Crowd, authentication was done on the first directory that contained the username but group memberships were aggregated across directories. In more detail:
For user authentication, Crowd searched the directories in the order specified per application and used the credentials of the first occurrence of the user.
When granting the user access to an application based on group membership, Crowd amalgamated the group memberships in all the directories where the username occurred.
Attachments
Issue Links
- duplicates
-
- Closed