Issue
This article documents a product limitation and a possible workaround for importing a user whose email address was updated in LDAP into a Liferay DXP instance.
Environment
- Liferay DXP
- LDAP server
Resolution
- This is actually a limitation and intended behavior. By default, Liferay Portal and DXP uses email addresses to authenticate a user. Therefore, a Liferay instance prohibits an updated user's email address in LDAP from being imported to Liferay when it is also being used to authenticate the user in Liferay. Otherwise, it throws an error in the console log and the import fails.
- One potential workaround is to change the method of authenticating users from email address to screen name, you could update user email addresses and have the updates imported to Liferay DXP. (While this configuration is in effect, the screen name cannot be modified.) When the import has finished, change the method of authentication back to email address if desired.
Additional Information
- LPS-34720 has been created as a feature request.