Hi All,

I've asked this question a couple of times before, thought I'd give it another go :)

I need to be able to stop users from customising their liferay portal. From my reading, it looks like you can do this once your users are listed within Liferay's user database, once they're in the database you can then organise them into groups and modify their rights to change things about.

The problem I have is that I have several thousand users, and as I understand it, they only get provisioned to Liferay once they've logged in for the first time.

Ideally, what I need to be able to do is provision the users and groups from eDirectory directly to Liferay before they've logged in. That way I can use the groups to set rights and such.

Has anyone had any success in syncing LDAP users and groups directly to Liferay?