Question on Login Handlers

[David Gersic]

>>> On 8/22/2013 at 03:17 PM, "Brewer, Edward L" <lee.brewer at Vanderbilt.Edu> wrote:

> LDAP1.  I have been given till tomorrow to dream up a way to ensure that if a 
> user is auth'ed in LDAP2 that they will not be allowed in any of the current 
> applications that are configured now.

Depending on how robust your identity management system is, you could add an attribute to users in LDAP2 that says "disabled in LDAP1", then modify the search filter so that users that are in LDAP2 and disabled in LDAP are not found.