DependencyTrack / DependencyTrack/dependency-track
LDAP: Manual Query for Groups Linked to Teams
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Quoting from #643
> LDAP synchronization occurs every 6 hours. It's not performed on-demand.
...
There is currently no way to manually trigger an LDAP refresh. For large directories, it can be a time-intensive task, which is why its not performed on-demand.
A new group that was added to our Active Directory was instantly available in DT 4.3.6 to be mapped to a team. I just had to wait a while (until the next working day) until `LdapSyncTask` picked up the members and my product managers were able to access portfolio management and start triaging vulnerabilities!
### Proposed Behavior:
Add a manual update/refresh button to the Team configuration screen that will refresh the member list of the specific group(s) that are mapped to the Team being refreshed.

Amber = suggested button location
Green = just one group to refresh for this team!
In our organisation we have hundreds of LDAP groups. So, refreshing just one (or a small number) should place a lot less load on the system.
Comment via Slack was that "will need to implement a 'last-sync' construct so that groups are not continuously synced unnecessarily."
### Use Cases
* Rapid onboarding of new employees
* Quicker response to changes for existing employees (ie new product manager can start triaging vulns "straight away"
* Makes testing easier. ie "If I map a brand new group to Team X can they perform desired activity Y?". This would be useful in my environment now that I have a test server that uses snapshot builds.
Contributor guide
Assessment
This issue has not been assessed yet.