Configure WebSphere Portal to use dynamic groups
By default, IBM WebSphere Portal is enabled for static groups. However, the Virtual Member Manager allows users to be members of either static or dynamic groups. Static groups have a persistent binding between a group and its members. Dynamic groups have a search query defined to retrieve the members of a group.
Disclaimer: The following procedure is to activate dynamic group support natively in VMM. It is preferable, if possible, to use the group membership attribute support to bring in dynamic group information from the LDAP server. Using the group membership attribute support for dynamic group membership is only possible if:
- Your LDAP server supports a group membership attribute
- The group membership attribute includes dynamic group membership information
Otherwise, complete the following steps to manually configure WebSphere Portal to use dynamic groups.
Clustered environments: Complete the following steps on the dmgr and then synchronize the nodes.
- Log in to the WAS console and go to...
Security | Global security | Available realm definitions | Federated repositories | Configure | Related Items | Manage repositories repository | Additional Properties | Group attribute definition | click Dynamic member attributes | New
- Specify values for the Name and Object class fields as appropriate. For example:
- Name: memberurl
- Object class: groupofurls
- Click OK and save the changes to the master configuration.
- Stop and restart the appropriate servers to propagate the changes.