LDAP Without the Pain: We Synchronized Groups and Collections in WikiMind

In WikiMind, we automated pulling the org structure from LDAP: groups and document collections now live not “by eye,” but by external_id. That means when LDAP changes, the system creates the required entities on its own and assigns permissions correctly. No more manual “oops, we forgot to grant access to the new employee.”

Another important point: if a user was soft deleted, then on a repeated login through OIDC we don’t create clones; we reactivate them cleanly. Yes, that exact case where someone “quit, came back a month later, and the access rights should already be in place.”

Against the background of the ongoing zero-trust trend and the push for order in IAM, this is a real must-have: less routine work, fewer mistakes, more control. In short, LDAP is no longer a legacy meme, but a working tool 😌