Here is an example configuration for incremental / real-time provisioning.
In general, ldappcng (hopefully 2.0.0) will support full-sync or bulkSync provisioning, as it currently does, as well as incremental provisioning and provisioning from the changelog.
Wiki Markup |
---|
Currently, ldappc\[ng\] provisions all objects (groups, stems, members) by retrieving all object identifiers (group names, stem names, member subjectIds) and synchronizing the results of the provisioning calculated for each identifier. |
Incremental provisioning consists of a membership object, so that an entire group does not have to be synchronized when a single membership changes. Instead, just the membership object is synchronized, and the membership object consists of a group identifier and a member identifier.
Provisioning from the changelog is supported via a data connector which consumes the changelog.
Example ldappcng configuration :
...