Search code examples
ldapaspnetboilerplate

Override default LDAP user creation behavior with ASP.NET Boilerplate/Module-Zero


Let me start by saying that the ASP.NET Boilerplate Module-Zero LDAP integration is working as expected.

My question is can I override the default behavior of this module.

By default, when an LDAP user first authenticates to the application, it generates a user account for each user and assigns them the default user profile.

My intention is to deny access to the user, until someone manually stubs out their user account and assigns their role (basically turn off auto-user creation).

Please share if you have thoughts on how to achieve this with ASP.NET Boilerplate/Module-Zero.


Solution

  • Following the document How to create external authentication source

    I think you can override CreateUserAsync method. After LDAP authentication successfully, create new user and just set him as inactive.