How to configure access control after using LDAP & SSO

[silverhoof]

After configured alfresco to use Active Directory for authentication, does it means that we no longer have user information installed in alfresco system?
If it does, how to configure content access in alfresco system without having user information in alfresco?

If using external authentication and some SSO infrastructure product like openAM or JOSSO, the user and group are all defined out side of alfresco. In this case how to configure content access in alfresco without having user and group record in the system.

[chrisokelly]

Some details about the user will be stored in the Alfresco DB, including groups and acls. The important separation to make here is between user details (info about a user) and user authentication (confirming that a request originates from user x).