Import users from existing LDAP about lightwave HOT 3 CLOSED

Hi, you can simply use the STS UI to configure your LDAP server/AD Domain Controller as an Identity Source, You don't have to use Lightwave as your user and group store. The OAuth service will reach out to your external LDAP server and query for user and group information and use that in the OAuth token. If you have an Active Directory platform, you can use IWA - you can join the Lightwave server to your AD domain controller and we will use the Kerberos PAC to compute your user group closure

from lightwave.

Correct me if I'm wrong but STS is only a vCenter service isn't it ? Here, I only have ESXis with Photon Controller, not vCenter.
You said that I "don't have" to use Lightwave users and groups but Photon Controller seems to only work with these.
About joining the Lightwave server to my AD domain, I will consider it once we have really tested Photon Controller, and once we'll be looking forward to use it in production environment, if this ever happens.

from lightwave.

VMware open sourced the STS that is used in vCenter, as Lightwave. Photon Controller relies on Lightwave for OIDC support. Photon Controller can be configured to authorize users and groups from Active Directory.

from lightwave.