Hello Janet.. Did you ever resolve this? I am facing the exact same issue and any help would be much appreciated And if Alexander sees this.. We use GCDS to assign emails to specific users (members of a certain group) as well as password sync, this I don't expect is possible with just authentication against freeipa as you suggested? Best regards. René