I am trying to use Keycloak to store my users in Active Directory. It creates the users, but they are not enabled by default.
I create them with a random password and with a pwdLastSet
attribute so that the user is ready to be enabled.
But it seems that users in AD are always created disabled, and I need to update the userAccountControl
attribute after the user is provisioned.
Is there a way to have this user enabled as it is created, that is, not after its creation?