Do I need to synchronize AD users with Alfresoc for passthrough?

[kaffi]

Hi guys

I do not completely understand. If I want to use a domain controller from AD to authenticate my users, do I need to import them also? The wiki of Alfresco is really confusing to me.

Regards

Kaffi

[angelborroy]

It's not required.

Probably this video will help you to understand the difference between identification and synchronisation when configuring LDAP:

Video Link : 1207  

[kaffi]

Dear Angel

Thank you very much. If I understood your video correctly,  It is not needed to import users and groups into Alfresco if a AD/LDAP is used. I have to ask this question for which use case I would need to import the users? How does it look like if I would use kerberos sso?

Is it also possible to deactive the authentication for the passthrugh method for specific groups?

Thank you very much for the answer.

Regards
Kevin