Optimizing Group Management with Dynamic Membership during authentication скачать в хорошем качестве

Optimizing Group Management with Dynamic Membership during authentication

Recorded at #adaptTo() 2025 https://adapt.to/2025/schedule/optimi... Nicola Scendoni, Adobe Dynamic Group Membership is a powerful capability in Apache Oak that significantly improves the scalability and performance of group synchronization and membership evaluation. Unlike traditional group membership, dynamic groups allow the representation of large external groups without incurring the typical performance overhead. In this session, we’ll explore how to enable Dynamic Group Membership across various Authentication Handlers — including custom implementations as well as built-in ones like SAML, OAuth, and OIDC. We’ll dive into the distinctions between local and external identities, and between static and dynamic external groups. We’ll examine real-world challenges in migrating from default to dynamic membership synchronization and provide a deep dive into the SAML migration hook implemented in AEM to streamline this transition. Attendees will gain actionable insights into implementing, configuring, and tuning this feature for optimal performance, along with lessons learned from production deployments. 00:00 Intro 01:20 Why should I care about dynamic groups? 05:41 External Users and Groups 09:41 Examples 11:56 Dynamic Group Membership 12:33 Dynamic Group Membership in SAML 18:48 Q&A