Authentication flow in Liferay when LDAP is enabled

Issue

• Liferay is configured to use LDAP
  
  1. When Liferay Authentication will happen?
  2. When LDAP Authentication will happen?

Environment

• Liferay DXP 7.0 -7.4

Resolution

• LDAP authentication always happens before Liferay Authentication.
  That is becauseLDAPAuthservice is registered withkey=auth.pipeline.pre(PropsKeys.AUTH_PIPELINE_PRE), causing it to execute before Liferay authentication. When the LDAP Auth Configuration’s “Required” property is not set, after failing to authenticate with all LDAP servers, a Liferay authentication will be attempted.
• https://github.com/liferay/liferay-portal/blob/d3689e57539b5a229a03c1a1ee2d9744281[…]feray/portal/security/ldap/internal/authenticator/LDAPAuth.java

Additional Information

• Connecting to a User Directory