Apache Syncope can manage users, groups and memberships (memberOf/members attribute) on external Active Directory via ConnId's Active Directory (JNDI) connector. Think you manage users and roles on Apache Syncope as centralized IdM, and have all these entities automatically kept in sync with your Active Directory users and groups: few simple steps onto the Apache Syncope administration console will help you to succesfully aim your goals ....
Before storing/propagating/synchronizing a specific user or role, a pre-processor can be called in order to allow any kind of manipulation before any actual operation takes place.
I've a keen interest in IAM solution also because I think that my first qualification is simply: IAM specialist. Today, googling idm open source I noticed that the first result occurrence (also in paid search results) is openiam identity manager, so, out of curiosity, I decided to install it.
389 Directory Server is an Open Source LDAP server by Fedora, valid alternative to other implementations like as Apache DS, OpenLDAP or OpenDJ: let's see how to install it and use it with Apache Syncope.
Today we see how to create a user without saving the password in the Apache Syncope repository. The user password will be stored only on Active Directory.