How can I limit the users' imported from my active directory?

[Phillip Davis]

I am trying to import users (Read Only, with Local Groups) into Jira Service Desk.  I am using an Active Directory Security Group to determine who should be able to access the Jira Service Desk portal.  However, when I set the base DN (LDAP Schema), it imports the group from AD, but not the users.  I only want it to import the users from that AD group...

I have the Base DN set to:  cn=securitygroup,ou=security groups,ou=OU,dc=domain,dc=com

I have tried setting the "Membership Schema Settings" "When finding the members of a group" as checked and unchecked. 

[Alexey Matveev · Accepted solution]

Hello,

You need to provide a filter for the users, who should be imported to Jira. You can read more about filters here:

https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html

[Phillip Davis]

Ok, but where do I put the filter?  Add the whole line as the "Base DN", or add it to the "additional User DN"? 

[Alexey Matveev]

No, this field is called User Object Filter

[Phillip Davis]

Got it.  I have it in place, but when it synchronized, it only got one user out of three.  When I look at AD, I see three members in the group specified...

[Phillip Davis]

Finally got it.  For some reason, two of the users were not showing up when using (sAMAccountName=*), but I switched it to use the following:

Base DN:  ou=OU,dc=domain,dc=com

UserObjectFilter:  (&(objectCategory=Person)(objectclass=User)(memberOf=cn=GROUP,ou=security groups,ou=OU,dc=domain,dc=com))

GroupObjectFilter:  ((&objectCategory=Group)(cn=*group*))

Now I am getting just the three users I require.

[Alexey Matveev]

I am glad to hear that you found a way to do it. If you feel like my answer helped you, kindly mark my answer as accepted.