# LDAP integration, link users to a group
**URL:** https://forum.keycloak.org/t/ldap-integration-link-users-to-a-group/4064
**Category:** Getting advice
**Created:** [August 1, 2020, 11:11am UTC](https://forum.keycloak.org/t/ldap-integration-link-users-to-a-group/4064 "2020-08-01T11:11:00Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@michro](https://forum.keycloak.org/u/michro)
#### Post date: [August 1, 2020, 11:11am UTC](https://forum.keycloak.org/t/ldap-integration-link-users-to-a-group/4064/1 "2020-08-01T11:11:00Z")
Hello,
I am trying to configure user synchronization between LDAP and keycloak, and I have following questions:
1. Does it possible to use Identity Provider(SAML/ADFS) for authentication, and User Federation (LDAP) for authorization (assign to a group)?
2. Is it possible to define mapping of user atribute (which value is e.g."##group1#group2#" to group? I mean the situation when we synchronize users from LDAP (users without group assignment) with user attribute which is also synchronized to keycloak. It possible to map user atribute to groups? I am sking for configuration in keycloak GUI, for sure it is possible via script.
Thanks.
---
### Author:  [@michro](https://forum.keycloak.org/u/michro)
#### Post date: [August 4, 2020, 6:53am UTC](https://forum.keycloak.org/t/ldap-integration-link-users-to-a-group/4064/2 "2020-08-04T06:53:33Z")
Somebody has experience with configuration in GUI and can help?