Shared network settings in Free
Network activation makes the LDAP settings apply in the network scope. Manage them in Network Admin. Central network settings are included in Free and do not require a license.
A site activation uses that site's settings. A network activation uses network options. Recovery accounts in network scope must be eligible super administrators.
Group-based site membership in Enterprise
Enterprise adds Accounts → Multisite membership for network activation. An active Enterprise license is required. Enter one rule per line in this format:
group:site ID:roleFor example:
News Editors:2:editor
Support Staff:3:author
Intranet Staff:2:subscriber- Find each target site's ID in Network Admin.
- Use an existing role on that site.
- Put the first choice for each site before other matching rules.
- Save and test a user with the intended directory groups.
How membership changes
The first matching rule for each site applies at login and import. A user can receive membership on several sites. Each target must be an active site in the current network. These rules replace ordinary group role rules.
New users receive only the memberships selected by the site rules. If a group no longer matches, the plugin restores prior roles or removes a membership that it created.
A manual role change made after the rule assignment is kept when the group no longer matches. Unrelated memberships stay unchanged. Blank rules stop membership updates and keep current memberships.
Scope and exclusions
Selected recovery accounts and super administrators are excluded. Site-only activation cannot change membership on other sites. Scheduled jobs for a network run on the main site.
The plugin uses one configured directory. Multiple independent directories and network configuration templates are not included.
