0

I am trying to use Keycloak to store my users in Active Directory. It creates the users, but they are not enabled by default. I create them with a random password and with a pwdLastSet attribute so that the user is ready to be enabled. But it seems that users in AD are always created disabled, and I need to update the userAccountControl attribute after the user is provisioned.

Is there a way to have this user enabled as it is created, that is, not after its creation?

0 Answers0