Propose to synchronize the "active" status of a user in LDAP / AD with the active status in XWiki

[aubincleme]

With the turnover in a company, some user accounts on a wiki hooked up to an AD will tend to be unused, simply because the user left the company. At this point, it could be interesting to propose to the administrators of the wiki to automatically update the "active" status of a user, so that the number of "active" users on the wiki really reflects on the number of users that can actually connect to the wiki.

This could come as an extra feature, as it may require more permissions on the Active Directory than what is currently needed. We could do two checks :

• Check periodically if a user is still registered in the AD, and if it's not the case anymore, then disable the user
• Check periodically if a user that is present in an AD is still marked as "active". If it's not the case, then disable the user.

[acotiuga]

This is something to be done in the https://jira.xwiki.org/projects/LDAP application.

[ClemensRobbenhaar]

Something has been done as https://jira.xwiki.org/browse/LDAP-107 but that misses an option to deactivate the users instead of removing them.

[trrenty]

The documentation for this feature can be found here:
https://store.xwiki.com/xwiki/bin/view/Extension/ActiveDirectoryApplication#HSynchronizingthe22active22statusesfromLDAPtoXWiki