LDAP changes effect the TLN of user

Question

hi,
We have EP7.0 and we have users who use the Portal for there daily tasks.
Every user has been provided some roles/worksets based on which the TLN looks fir that user.
Now the problem is there had been some changes done at the LDAP level, so consequently the users are not able to see there assigned roles/worksets in the TLN.
Can anyone help us as how to work on this.
Thanks in advance.
kris

Answer 1

Hi Kris,
I do not have documents on my setup but I will explain my setup of our Portal with LDAP.
1) We have setup SSO between LDAP and Portal, and UME datasource comes from LDAP, thus all Security Groups and users from LDAP will also be available in Portal.
2) In Portal, LDAP Security Groups are known as "Groups" in UM tab.
3) We created Portal Roles (ESS, MSS etc) in CA and assign these Roles to the Groups (LDAP Security Groups) via UM
    Example: Portal Role (ESS) is assigned to Group (ESS). Naming convention is very important !!
4) We assign users in LDAP to the Security Groups (all these are done in LDAP..not Portal). Thus this assignments will result automatically that the have the necessary Portal Roles (due to the relationship created between the Portal Role and the Security Group).
Thus, all user assignments for Portal access are done via LDAP. In the Portal, you only management the relationship between Portal Roles to that of the Groups (LDAP Security Groups)...meaning minimun or no maintenance for users management in Portal.
Hope that helps and I hope my remarks above and give you some idea for your situation. I also make sure that the LDAP do not change any activities that relates to Portal without Portal Admin approvals.
I do welcome more points for helpful suggestions 
Ray